Check out all the on-demand sessions from the Intelligent Security Summit here.

Open source is a critical component of just about every modern software stack — from databases to cloud security — and a recent report from Synopsys concluded that 98% of codebases contain at least some open source code.

But open source software (OSS) can present challenges, such as licensing and compliance issues and the need to ensure community buy-in for a new project and foster good relationships with the wider open source world. At the heart of many of these problems is the fact that OSS, by its very nature (and definition), necessitates an open, collaborative approach that may run contrary to traditional “closed” business processes.

To bring formality and order to the mix, open source program offices (OSPOs) have become an integral part of businesses ranging from tech titans like Google to venture capital-backed startups.


Though the precise responsibilities of the OSPO can vary, having a dedicated office provides structure and formalizes the existence of open source software, tools, and projects inside a company. It may even help the company align OSS project goals with key business objectives and justify decisions internally, such as the need to subsidize a full-time project maintainer or dedicate resources to open source projects the company actively benefits from.


Intelligent Security Summit On-Demand

Learn the critical role of AI & ML in cybersecurity and industry specific case studies. Watch on-demand sessions today.

Watch Here

Oskari Saarenmaa is cofounder and CEO at Aiven, a company that manages businesses’ open source data infrastructure, with commercial support for MySQL, Elasticsearch, Apache Kafka, M3, Redis, InfluxDB, Apache Cassandra, PostgreSQL, and Grafana. Hot on the heels of its recent $100 million funding round, the company is now gearing up to launch its first OSPO.

“Open source is at the heart of what Aiven offers, and it is in our collective interest to develop open source technologies and ensure that open source remains truly open,” Saarenmaa told VentureBeat. “As the company grows, staying connected to open source communities is more and more important, and we want to make sure there’s a team and function at the company that coordinates our efforts, moving our contributions from occasional to continuous and predictable. This is why we’re now launching the open source program Office.”

Aiven console

Above: Aiven console

Aiven’s OSPO will specifically aim to contribute back to the open source projects it has built its business on. “Our OSPO team works as the bridge between the different OS communities and Aiven to drive fixes and features important to Aiven,” Saarenmaa explained.

The Helsinki, Finland-based company is currently recruiting open source developers spanning Kafka, PostgreSQL, and Elasticsearch, in addition to an open source program manager. Saarenmaa said he expects the OSPO to eventually oversee open source compliance, though this is not as urgent a priority for the office as it might be for companies that “started out further from the open source world.”

Saarenmaa said that while open source engagement and contributions “come up a lot” in conversations with customers and peers, the company is hearing relatively little about OSPOs specifically.

“An OSPO model has, however, existed for quite some time in large companies to coordinate existing efforts related to open source,” he said. “Some of these offices are just about driving the consumption of open source within those organizations and can thus be quite disappointing from the community’s perspective. But other companies are proactively engaging the community to collaborate and to give back.”

Open source ecosystem

Arjan Stam is director of system operations at Alliander, an energy network company and member of the Linux Foundation’s open source coalition LF Energy. Stam has experience building open source program offices, including at Alliander, which has an OSPO for coordinating and facilitating an open source ecosystem, advising on its various open source projects, organizing events such as hackathons and webinars, and helping build an open source community around specific projects.

Above: Alliander’s HQ in Arnhem, Netherlands

Alliander’s OSPO came about as a result of joining the LF Energy coalition in 2018.

“The first need for an OSPO became apparent when more interest arose on how to map our architecture landscape on an open source product landscape and how to build and coordinate a roadmap on this,” Stam told VentureBeat.

This was the genesis for a more open source-centric ethos at Alliander and helped bring structure and organization to its open source plans.

“The OSPO turned out to be an excellent means for this because from there there was an overview on all activities with respect to collaboration, [code] reuse, and quality,” Stam said. “From there, we started consolidating code, building better development structure, and slowly looking externally for developing open source. The OSPO as a strategic pillar for change was born.”

Alliander and LF Energy open-sourced the Grid Exchange Fabric (GXF) project last year, with the goal of addressing interoperability in the Dutch national power grid. Having a centralized, designated place for all things open source has also proved invaluable.

“There was a place to go to to ask questions and have discussions,” Stam explained. “We put in place all kinds of internal information-sharing platforms that are accessible to everybody in the company. We also made sure the development teams started using these platforms for structured communication of their development.”

In the intervening months, Alliander’s OSPO has evolved and become “more mature,” according to Stam, with roles spanning legal, enterprise architecture, and a dedicated OSPO manager. “Also, awareness of our responsibility to the outside world has grown,” Stam added. “The OSPO is no longer about only software, but about reputation and identity.”

As OSPO doesn’t adhere to a rigid structure, it may evolve in tandem with a company’s specific needs. This can involve external and internal developer advocacy, communicating and executing strategies, ensuring a company’s software complies with the license restrictions of the open source components it uses, and keeping it well-maintained and secure.

“The OSPO has slowly become the entity where coordination is done on how we will start new projects based on collaborationist open source,” Stam said. “It has become a strategic entity that helps speed up the realization of the Alliander roadmap.”

VentureBeat's mission is to be a digital town square for technical decision-makers to gain knowledge about transformative enterprise technology and transact. Discover our Briefings.