runsonwhat

Openssf's tech stack

What does Openssf use?

Openssf (openssf.org) uses at least 24 tools we can see from public records, including Pantheon for hosting, HubSpot for sales, Google Analytics for analytics and WordPress for its website. Last checked .

Industry
IT Services
Size
201–1,000 employees
Based in
San Francisco, United States
Founded
2019
LinkedIn
Company page
Re-check liveVisit openssf.org
Tools found
24
Categories
12
Layers
5 of 5
Changes seen
1

Openssf's stack, layer by layer

Each tool links to the other companies we've found using it. The label says what kind of public trace gave it away.

Edge & Hosting

5 tools, where the bytes are served from

Hosting & Cloud

CDN & Edge

DNS

Application

7 tools, what the product is built with

Frontend

AI

Media & UI

Data & Observability

3 tools, what they measure and store

Analytics

Go-to-market

7 tools, how they find and keep customers

Website & CMS

Ads & Pixels

Sales & CRM

Company Ops

2 tools, what the team runs on day to day

Email Delivery

Security & Compliance

What changed at Openssf

Recent starts and stops

  1. StartedGitHub Pages

Companies like Openssf also use

Tools common among companies with a similar stack that we haven't found at Openssf.

Companies with a stack like Openssf's

Ranked by shared tools, with rare tools counting more.

More IT Services companies

Other IT Services companies we've checked.

Openssf tech stack FAQ

What tools does Openssf use?

As of October 2026, runsonwhat has found 24 tools at Openssf (openssf.org) in public records. Edge & Hosting: Cloudflare, Fastly and Pantheon. Application: jQuery, Google Fonts and Font Awesome. Data & Observability: Google Analytics, Google Tag Manager and Segment. Go-to-market: WordPress, Google Ads and Meta Pixel. Company Ops: Forward Email and Transcend. Last checked October 16, 2026.

What cloud does Openssf run on?

Openssf uses Pantheon for hosting and cloud infrastructure, alongside GitHub Pages, according to runsonwhat (October 2026). runsonwhat found Pantheon through Pantheon code on openssf.org. Pantheon is used by 4,302 companies runsonwhat tracks.

What CRM does Openssf use?

Openssf uses HubSpot for its CRM, alongside ZoomInfo, according to runsonwhat (October 2026). runsonwhat found HubSpot through a subdomain that points at HubSpot and email records. HubSpot is used by 91,961 companies runsonwhat tracks.

What analytics tools does Openssf use?

Openssf uses Google Analytics for analytics, alongside Google Tag Manager and Segment, according to runsonwhat (October 2026). runsonwhat found Google Analytics through Google Analytics code on openssf.org. Google Analytics is used by 851,060 companies runsonwhat tracks.

What is Openssf's website built with?

Openssf uses WordPress for its website, alongside HubSpot CMS, according to runsonwhat (October 2026). runsonwhat found WordPress through WordPress code on openssf.org. WordPress is used by 581,569 companies runsonwhat tracks.

Does Openssf use jQuery?

Yes. runsonwhat found jQuery at Openssf through jQuery code on openssf.org. jQuery is a Frontend tool used by 896,219 companies runsonwhat tracks.

Has Openssf changed tools recently?

Yes. On runsonwhat's rechecks, Openssf started using GitHub Pages (latest on October 6, 2026). A change counts only between two checks of openssf.org done the same way.

Which companies have a tech stack similar to Openssf's?

The companies with the stacks most like Openssf's are OpenSearch, The Yocto Project, Lf Decentralized Trust and Gis, according to runsonwhat (October 2026). Each shares 7 to 14 tools with Openssf, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.

How does runsonwhat know what Openssf uses?

runsonwhat reads public records only. Of the 24 tools at Openssf, 18 were found through code on openssf.org, 3 through subdomains that point at the vendor, 2 through DNS records and 1 through website configuration files. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and openssf.org about monthly.

We read public traces only: DNS and email records, certificate logs, website code and published subprocessor lists. A tool is listed when a direct record backs it up, and dropped when a recheck no longer finds it. Is this your company? See how to opt out.