"So, on the liability question, the first thing that we’re trying to do here is make sure that we’re placing liability where it will do the most good... The company that is building and selling the software, they need to be liable for what they put in it and work to reduce vulnerabilities and use best practices... We can’t have them devolving that responsibility down to a two-person, open-source project that hasn’t received any funding in the last five years. That’s not going to get us the outcome that we want."
- Senior White House administration official, speaking about liability provisions of the National Cybersecurity Strategy
From a security remediation point of view ... no other vendor came close to the level of detail Tidelift provides—because Tidelift works directly with the open source maintainers of the projects EMPLOYERS and other enterprise organizations depend on.
“That relationship is pure gold. The openness you have with the open source maintainers and the ability to talk with the consumers about how we’re using their products—we have a direct line of communication from their fixes and what versions we should be using.”
50 Milk St, 16th Floor, Boston, MA 02109
