Pathways to Enable Secure Open-Source Ecosystems

The Pathways to Enable Secure Open-Source Ecosystems (PESOSE) program, administered by the U.S. National Science Foundation (NSF), is designed to support the development of robust, secure, and sustainable open-source ecosystems that stem from scientific and engineering research. This program responds to the growing importance of open-source tools—ranging from software to data platforms—that fuel innovation across sectors like artificial intelligence, cybersecurity, cloud computing, and healthcare. Recognizing both the opportunities and vulnerabilities in such ecosystems, PESOSE aims to ensure that open-source products used in critical infrastructure are effectively governed, widely adopted, and secure. PESOSE invites proposals under three distinct tracks, each tailored to different stages of ecosystem development. Track 1 focuses on scoping and planning, helping organizations assess the feasibility and needs of forming a full-fledged ecosystem. This includes governance structures, legal frameworks, security planning, and community engagement strategies. Track 2 supports the establishment and scaling of existing open-source products into sustainable ecosystems with clear management, community growth, and security mechanisms. Track 3 concentrates on identifying and addressing vulnerabilities in existing open-source systems that pose risks to privacy, national security, or public safety. Through these tracks, NSF intends to transform research products into operational technologies that can be deployed in national and societal contexts. The program does not allow voluntary committed cost sharing, and all proposals must conform to NSF's Proposal & Award Policies & Procedures Guide (PAPPG). Although proposals may involve multiple organizations, a single entity must serve as the lead. Proposers are required to include 3–5 letters of collaboration from independent users or contributors of the open-source product. Additional mandatory documents include a personnel and collaborators list. Track 1 and Track 2 awardees must also engage in "I-Corps for PESOSE" experiential activities focused on building resilient open-source ecosystems unless they have already completed it under Track 1. The estimated funding for this opportunity is $40 million, supporting 40 to 60 total awards. Track 1 awards may receive up to $300,000 for one year, while Tracks 2 and 3 may each receive up to $1,500,000 for up to two years. Applications are due twice annually—on the first Tuesday of September and the first Tuesday of March. The next deadlines are September 1, 2026, and March 2, 2027. Proposals are submitted through either Research.gov or Grants.gov and are reviewed based on intellectual merit and broader societal impacts, as well as criteria specific to each track. Eligible applicants include accredited U.S.-based institutions of higher education, non-profit and for-profit organizations, state and local governments, and federally recognized tribal nations. Specific eligibility restrictions apply to principal investigators, including requirements for full-time employment and authority to oversee project activities. Foreign organizations and individuals are generally ineligible to receive NSF funds but may participate as collaborators. For inquiries, applicants may contact the PESOSE Program at [email protected] or by phone at (703) 292-8804. This program recurs annually, with proposals accepted each March and September. All proposals must be submitted by 5 p.m. local time of the submitting organization. Successful applicants are notified through NSF’s standard review and award notification processes. Standard NSF reporting requirements apply throughout the award period.

Clearly describe long-term vision, governance model, and risk mitigation strategy; align with NSF priorities and evaluation criteria.