OWASP OASIS named finalist for SANS Innovation of the Year

OWASP OASIS has been selected as a finalist for the SANS Difference Makers Awards in the Innovation of the Year category, with voting open through Nov. 9. The recognition spotlights the project's effort to turn automated AI patches into reviewed security fixes for open source software.

Why it matters: - The finalist nod puts a community-led open source security project in the spotlight ahead of the SANS Difference Makers Awards. - The recognition matters because OWASP OASIS is aimed at speeding up vulnerability remediation for the software that powers much of the internet. - The award category honors the most impactful open source product or tool of the year.

What happened: - OWASP OASIS said on Nov. 4, 2026, that it was selected as a finalist for the SANS Difference Makers Awards in the Innovation of the Year category. - Voting is open through Nov. 9 on the SANS awards page. - Winners will be announced on Dec. 15 in Washington, D.C. - The project was cited for turning automated AI patches into reviewed, upstream-ready security fixes in public view. - The nomination also recognized OWASP OASIS for building a global application security community focused on protecting open source.

The details: - The SANS Difference Makers Awards recognize cybersecurity professionals who go above and beyond, including practitioners, educators, researchers, and community builders. - Honorees are nominated by the global cybersecurity community. - OWASP OASIS was nominated for its transparent, community-led design and the response that model has enabled. - The project is designed to let AppSec professionals contribute to open source application security in minutes. - OWASP OASIS supports peer-validated vulnerability remediation and aims to secure code at scale. - Chris Holt, strategic engagement and community architect at Intigriti and a founding industry member of OWASP OASIS, said the recognition reflects the work of the community and shows how important fix automation is for securing open source. - Holt said the finalist recognition should further strengthen the project's volunteer community.

Between the lines: - The finalist spot suggests growing interest in workflows that combine AI-assisted patching with human review. - The project's emphasis on public, community-validated fixes signals a push toward more transparent open source security remediation. - The awards framing also highlights community-building as a core part of cybersecurity progress, not just technical tooling.

What's next: - Public voting continues until Nov. 9. - The awards ceremony is scheduled for Dec. 15. - People interested in the initiative can join at owasp-oasis.org. - OWASP OASIS is also encouraging cybersecurity practitioners and the public to participate in the voting process before it closes.

The bottom line: - OWASP OASIS is getting national-stage recognition for a model that blends AI automation with human validation to help fix open source security issues faster.