Loading…
Open Source Summit + Embedded Linux Conference North America... has ended
May 18-20, 2026
Minneapolis, MN
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit North America 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central DaylightTime (UTC -5). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
← Back to schedule
Running an Open Source Vulnerability Rewards Program - Hayden Blauzvern, Google
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200A (Level Two)
Stewardship of open source software extends beyond code contribution; it also requires a proactive commitment to security. In this session, a lead for Google's Open Source Software Vulnerability Rewards Program (OSS VRP) shares insights from managing a program that secures a vast and rapidly evolving portfolio of open source projects.

We will explore the complexities inherent in operating a VRP with such a broad scope. The session will cover lessons learned on identifying common vulnerability patterns, executing remediations at scale, and managing security incentives across an extensive landscape of diverse, unconnected projects.

As a call to action, we will encourage other organizations to invest in similar rewards programs for the projects they maintain, supporting and incentivizing security researchers to build a more resilient open source ecosystem for everyone.
Speakers
avatar for Hayden Blauzvern

Hayden Blauzvern

Technical Lead Manager, Google
Hayden Blauzvern is a technical lead manager on Google’s Open Source Security Team, focused on making open-source software more secure through code signing and applied transparency. Hayden is a maintainer and the community chair on the Sigstore project.
Wednesday May 20, 2026 2:10pm - 2:50pm CDT
200A (Level Two)
  OSS Enabling & Management, Operations Management & OSPOs
  • Audience Experience Level Any

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Tweet Share

Get help with the event

Contact event planner Event login
View support guides Find upcoming events
Create an event you'd love to attend!
Explore why organizers choose Sched • Success stories
Event App • Event scheduling • Event registration • Event ticketing • Sched forms • Call for papers • Badges • Conferences
© 2026. SCHED LLC - All rights reserved - Helping events since 2008
Event Planning App • Privacy • Terms
Share Modal

Share this link via

Or copy link