The Chair called the meeting to order at around 12 pm US EST.
The Board has a quorum.
As the Board consists of individuals from many competing organizations, OWASP and its Board shall abide by all applicable anti-trust and competition laws. To avoid any perceived or actual conflict of interest, or anti-trust concerns under US federal, state, or regulations, only the published agenda shall be discussed or voted upon, or amended as below. If there are any conflicts of interest, Board members are expected to disclose the conflict of interest and must recuse themselves from discussion and voting.
Changes to the agenda - unless otherwise prohibited by anti-trust or competition laws - including adding, altering, or tabling of motions is permitted by following Roberts Rules of Order (RONR 12th Ed) 41:63, which requires an affirmative two-thirds vote.
Motion to amend "Resolved, that the agenda for the January 28, 2026, OWASP Foundation Board meeting be amended to include discussion and a vote on creating a Global Board Audit Committee."
Sponsor: Ricardo Griffith Second: Steve Springett
Vote
In Favor: 7-0
Background The Board will receive an update on the planning activities from the OWASP Foundation staff for OWASP's 25th Anniversary celebrations in 2026. This includes event planning, marketing strategies, and community engagement initiatives to commemorate this milestone.
Suggested discussion time: 10 minutes
Background In the last few business days of 2025, Meetup.com announced changes to their pricing structure that will significantly impact local OWASP chapters using the platform for event organization. This aims to discuss the migration of nearly all chapters and projects to the OWASP website event management system, rather than relying on Meetup.com.
Suggested discussion time: 20 minutes
Background The Board will discuss a proposal to modify the Membership Policy to add specific benefits for Distinguished Lifetime Members. This change aims to recognize and reward long-term commitment and contributions to OWASP.
Summary:
Proposal: Distinguished Lifetime Members receive lifetime leader benefits, including leader discounts and access privileges.
Board voiced general support.
Sam will prepare a formal policy modification for next meeting.
Suggested discussion time: 15 minutes
Task - the proposal will be sent to the policy review team
Background The Board will discuss strategies for managing and protecting the OWASP brand reputation in light of recent events involving certain project(s). The discussion will revolve around understand risks around projects with poor quality or outdated information, and how to mitigate potential negative impacts on OWASP's overall reputation.
Suggested discussion time: 15 minutes
Background Andrew van der Stock will lead a discussion on the development of a future AI policy for OWASP. This policy aims to address the ethical use of AI technologies within OWASP projects and initiatives, ensuring alignment with OWASP's mission and values.
Additionally, we should discuss if this needs to be a policy that covers all contributions, not just projects. As there are multiple concepts to consider, we may need three distinct policies, or one combined policy with separate sections:
One example discussed in the paper is that of low quality mass-generated security vulnerability submissions made with AI tools that could make running OWASP's CRA-mandated vulnerability disclosure program (VDP) difficult or impossible, as validating and then "fixing" all these submissions would take an inordinate amount of time and effort from staff, project maintainers, and contributors.
Suggested discussion time: 15 minutes
The Board will adjourn to an executive session to discuss a sensitive matter.
Suggested discussion time: 15 minutes
No items.
The next general Board meeting is on February 24, 2026, at 12 pm US Eastern Time.
"It is moved, and seconded to adjourn. Those in favor, say "aye"" Steve Springett motions, Ricardo Griffith seconds"
The next general Board meeting is next general Board meeting is on February 24, 2026, at 12 pm US Eastern Time..
Slack