Framatube

Open source software is the foundation of modern technology, yet many corporations treat it as a free resource rather than a critical supply chain component. New legislation, like EU’s Cyber Resilience Act, is going to change that. This session will explore the risks that arise from this passive approach and propose a new model: one where corporations transition from being mere consumers to active stewards of the open source ecosystem. We have heard from numerous companies that they need new standards in this area.

This talk is a summary of those ongoing conversations and an invitation for others to join in this crucial effort. We will outline a framework for building new internal processes and advocating for an industry-wide standard on open source sustainability. Attendees will learn how to go beyond basic vulnerability detection and proactively assess the long-term health of the projects they depend on, informing a new kind of risk management.

By Miguel Angel Fernandez

The Open-Source information system mapping tool (Mercator)[https://github.com/dbarzin/mercator] provides organizations with a platform to visualize and understand and secure their IT environments. IT teams can use Mercator to improve IT service management through its interactive diagrams and data integration and flexible visualizations which help them navigate complex infrastructures.

By Didier Barzin

Range42 is an open cyber range platform developed by the National Cybersecurity Competence Center (NC3) under the Luxembourg House of Cybersecurity with the help of DIGISQUAD. It automates the deployment of training environments for cybersecurity education and research, with current capabilities including automated provisioning on Proxmox, integrated monitoring, VPN connectivity, and an initial inventory of vulnerable and misconfigured environments. A visual designer for lab infrastructures is in development, alongside plans for expanded scenario coverage and multi-subnet support. This talk will provide a project status update and invite the open source community to contribute to scenario design, infrastructure automation, and user-facing tools.

By Steve Clement

At CIRCL (Computer Incident Response Center Luxembourg), part of the Luxembourg House of Cybersecurity (LHC), we embarked on a journey to build and sustain open-source solutions for CSIRTs. With over 14 years of experience, we’ve gained valuable insights into open-source software development and community engagement in the cybersecurity field. Below are some of the key lessons we’ve learned along the way. The talk will also include an overview of the tooling developed by CIRCL over the past 14 years.

An overview of all open-source tools developed by CIRCL to support CSIRT operations, cyber threat intelligence (CTI), and digital forensics and incident response (DFIR) will be also included in this talk.

By Alexandre Dulaunoy

This talk explores the similarities and differences in how organizations from the private and public sectors engage with Open Source. It highlights the growing relevance of Open Source for the digital economy and digital sovereignty, and examines typical organizational models for Open Source communities, including how both sectors can effectively collaborate with them.

A key focus will be on how Open Source can be leveraged as a competitive advantage — outlining not only the benefits, but also the challenges organizations face when embracing it.

These insights will be illustrated through the case of LibreOffice, the free and open source office productivity suite, serving as a role model for sustainable Open Source collaboration.

By Lothar K. Becker

Mockoon is one of the most popular open-source API tools, built and maintained from Luxembourg. In this talk, its creator shares the journey of growing a developer tool used by thousands, without external funding. Learn what worked (and didn't) in the pursuit of sustainability through sponsorships, community, and a cloud SaaS offering.

By Guillaume Monnet

France Numérique Libre was born in April 2025 when local authority IT managers decided to get together and exchange information on free software solutions and services.

Firmly rooted in the French opensource eco-system, it is supported by national associations and the French government, which is offering more and more open-source solutions to local authorities.

Open to the world and to new developments in the field, France Numérique Libre aims to accelerate the opensource dynamic in France, which is definitively gaining momentum.

By Nicolas Vivant

Europe faces the challenge of achieving digital sovereignty and innovation across a fragmented cloud landscape. The 8ra Initiative (IPCEI-CIS) is a pan-European, industry-driven response: it focuses on building a Multi-Provider Cloud-Edge Continuum (MPCEC), based on openness, interoperability, and resilience. With more than 120 partners across 12 member states, 8ra aims to create a European alternative to closed hyperscaler models - embedding Open Source as a guiding principle for governance and technology. By building the necessary components for a so called Multi-Provider-Cloud-Edge-Continuum stack, organizations will no longer be tied to a single provider and can run cloud-native applications wherever they choose. The developed open source components support, that data can be processed locally where it is produced, reducing latency, environmental burden, and data transfer costs by combining cloud and edge resources from multiple sovereign providers. Only an open source development will ensure the necessary acceptance to truly create a powerful ecosystem from the diversity of domestic providers.

Within this framework, driven by the ApeiroRA project, NeoNephos, a foundation hosted by the Linux Foundation Europe, ensures the long-term sustainability of 8ra outcomes. By integrating the components of the stack along the IPCEI-CIS Reference Architecture (ICRA), NeoNephos provides an open, neutral reference model that is community-driven and collectively governed.

By Matthias Kuom

Perfect Storm: "A confluence of events that drastically aggravates a situation."

In "The Perfect Storm," we'll explore the critical confluence of digital sovereignty, the NIS2 directive, and the Cyber Resilience Act (CRA). These new regulations create a "perfect storm" that significantly increases personal liability for C-level, with fines reaching up to €10 million per incident. This session will outline who is liable and the immediate actions you must take to achieve and maintain compliance.

By Emiel Brok

Lessons learned from 13 years at The Document Foundation and LibreOffice

LibreOffice is developed, tested, documented, translated and marketed by countless contributors from around the world and used by millions of users around the globe. This community of creators and users is backed by a non-profit foundation which not only publishes the software, but also acts as a trustee: It gives the community its legal personality, is the guardian of trademarks and domains, and also manages donations as well as assets. The community makes the software what it is today: the leading free and open source office suite, available free of charge to personal, business and governmental users. True to the motto “by the community, for the community” the foundation was made possible by numerous donors from all over the world who raised the necessary capital in just eight days as part of a public fundraising campaign. In this talk Florian not only explains the legal setup of The Document Foundation and how its statutes enshrine values and ideals like openness, transparency and meritocracy. He also explains how it was designed to combine the conservative elements of a foundation with the modern approach of an open source project and shares a “lessons learned“ from the past 13 years to explain the challenges a growing FLOSS project can face.

By Florian Effenberger