Open source platform security