Welcome to the Open Security Evaluation Criteria (OSEC) website! OSEC is a framework for evaluating the security functionality of networked products. OSEC is founded on the notion that product security evaluation criteria should be openly examinable, subject to critique and amendment, vendor and end-user input, and ultimately, become the product of community peer review. Results should be displayed along with the gritty testing details, testing notes and observations, as with any good lab test. OSEC defines a core set of tests for any networked or security product, and then adds further security and performance tests specific to each product space. While OSEC is a trademark of Neohapsis, its criteria are open to view and critique, and were formulated with input from vendors, end-users, and many from the security community actively working in the product spaces for which criteria have been developed.

Dec 28, 2004 - Updated OSEC website
Sept 23, 2002 - Posted NIDS v1 vulnerability list
Aug 30, 2002 - Posted OSEC Testbed Diagram and Baseline Traffic Graphs
Aug 26, 2002 - OSEC Initiative goes public
Aug 20, 2002 - Site launched