FOSS Backstage 2026

Æva Black

Æva Black is an international thought leader on open source software security, with over 25 years of experience building digital infrastructure, leading open source projects, and advising on cybersecurity policy.

— “Technical Luminary” — Wired

After leading OSS Security Programs first in the Azure Office of the CTO and then at the U.S. Cybersecurity & Infrastructure Agency, Æva founded Null Point Studio, a boutique cybersecurity consulting firm in the Netherlands, to continue supporting the sustainability and security of free and open source software.

— “child prodigy turned creative genius” — CISA

A veteran of the first dot-com bubble, Æva’s signature red-and-black aesthetic has darkened conference stages around the world since 2005. When not behind a computer screen, they can be found on a motorcycle or looking for new ways to support their local queer community.


Company/organization you are affiliated with::

Null Point Studio


Sessions

03-16
10:05
40min
Can Open Source be Secure by Design?
Æva Black

The tech Industry has relied heavily on Free and Open Source Software for 20 years but under-investing in its security and maintenance has increased global cybersecurity risk. Æva Black will reflect on this history and show how regulations could improve security across the ecosystem.

Security
Auditorium
03-16
16:40
30min
Secure by Design? Discussion on Voluntary Security Attestations
Æva Black, Gregor "Little Detritus" Bransky

With this discussion following the Chatham House Rule format, we wish to invite FOSS Backstage attendees to come together to explore how communities could issue risk-based attestations sufficient to reduce downstream compliance burdens in ways that support (rather than burden) open source communities.

Security
Wintergarten