Looking for AppSec champions to lead community sessions for OWASP OASIS.
Description
This is a community announcement seeking volunteers to lead sessions for OWASP OASIS, an open-source security community focused on validating vulnerability fixes in open-source projects. The initiative aims to build a collaborative environment for AppSec practitioners to gain practical experience and help secure open source software.
Reddit Discussion
Hey everyone! OWASP OASIS, an open-source security community that validates vulnerability fixes in open-source projects, is looking for volunteer leaders. https://www.owasp-oasis.org/
We've got 900+ AppSec people signed up so far. Now we're trying to turn that into an actual community, not just a sign-up list. So we're looking for volunteers to lead a few kinds of community-run sessions:
Office hours: drop-in time for questions
Onboarding sessions: helping new members get started
Collaborative validation sessions: working through proposed fixes together as a group
The process is pretty simple. You raise your hand, we train you, and then we get the sessions on the calendar. You don't need to be an expert in everything. You just need to be willing to help.
The bigger idea is to give people a safe place to get real AppSec experience. People teach each other, work in teams and gain valuable practical experience while securing open source projects.
If you're interested, or just have questions about how it works, comment below or DM me.
Links cited in this discussion
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OWASP OASIS is recruiting volunteer leaders to facilitate community sessions such as office hours, onboarding, and collaborative validation of proposed vulnerability fixes in open-source projects. The goal is to foster a supportive community where members can teach each other and gain hands-on application security experience. This announcement does not describe a security vulnerability or threat but rather a community engagement effort.
Potential Impact
There is no direct security impact or vulnerability described. This is a community-building initiative intended to improve open-source security through collaborative validation and education.
Defensive Guidance
No mitigation or remediation is applicable as this is not a security threat or vulnerability.
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Newsworthiness Assessment
- {"score":30,"reasons":["external_link","non_newsworthy_keywords:community","established_author","recent_news"],"isNewsworthy":true,"foundNonNewsworthy":["community"]}
- Has External Source
- true
- Trusted Domain
- false
Threat ID: 6ad797ca2cdf04f656426206
Added to database: 10/20/2026, 16:33:14 UTC
Last enriched: 10/20/2026, 16:33:17 UTC
Last updated: 10/21/2026, 04:48:23 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.