Managed open source. Backed by maintainers.

Customizable catalogs of known-good, proactively maintained JavaScript, Python, Java, PHP, Ruby, and .NET components

The Tidelift Subscription

MANAGED OPEN SOURCE FOR APPLICATION DEVELOPMENT TEAMS

Stop parsing painful scanner reports

full of false positives and open source trivia

Start using our catalogs of known-good open source components

that are proactively managed for you

Create your own catalogs of approved components

and customize specifically for your organization

Tidelift named IDC Innovator

IDC_Innovator_2020_horizontal

"Tidelift is positioned as the single source of content for supported technologies so enterprises can build and manage their software using known-good OSS components."

- Al Gillen and Elaina Stergiades, IDC

Speed up application development, save money, and reduce risk when building apps with open source.

Tidelift-abstract-UI

Security

Verified updates for zero-day vulnerabilities, coordinated security responses, and immediate notifications of which of your applications are impacted, with the fix prepared for you. Like your phone, just "apply updates" to stay secure.

Licensing

Verified-accurate open source licenses (including IP indemnification) and customizable policy enforcement. Your up-to-date software “bill of materials” is always one click away.

Maintenance

Tidelift continuously guides you on your upgrade path, steering you towards the best packages and versions for your particular application. It’s like a GPS for open source software.

Tidelift partners directly with the independent maintainers behind a broad range of community-led open source projects, paying them to ensure their packages meet clearly defined security, licensing, and maintenance standards today and in the future.

Because maintainers are paid a reliable income for their ongoing work, they can dedicate their efforts towards keeping their software enterprise ready.

And maintainer income scales as more subscribers use their packages. More income means more investment making their software even better, faster.

That alignment of interests between users and creators just makes sense. It's a win-win.

Are you an open source maintainer? Learn more and see if your package is eligible for income.

"Tidelift has a really interesting approach to funding open source work. It's a pretty simple concept: maintainers get paid and the organizations who use their projects get the support and dependability they need in return."

- Evan You, Vue.js (Javascript)

"Tidelift has a solution for those companies that would otherwise have to pay many open source projects small amounts each year."

- Roel Spilker, Project Lombok (Java)

"Tidelift formalizing a lot of the project minutiae is incredibly helpful—things we should do but often don't, because there are other things to be done."

- Alex Clark, Pillow (Python)

Resources to get you started

Best practices for managing your open source artifacts

Join us on Wed. Oct. 7 at 10:30 am PT a we share the latest best practices orgs can use to manage their open source dependencies.

Cooking with Tidelift

With many people quarantined at home with their families during the pandemic, we thought it might be fun to tell the story of how the Tidelift Subscription works—as a children's book.

Download Now

The future of open source software support

IDC analyst Al Gillen explains the history of open source support models and his thoughts about the future of open source support.

Watch Now

Webinar: Best practices for managing your open source artifacts