Annual Report · 2025

A year ofinvestment.

2025 was planned as an investment year — building capacity, nearly doubling the team, and deepening engagement with the global OpenSSL community, while closing the year close to break-even on commercial support revenue alone.

OpenSSL Corporation
2025
Annual Report
Security & Privacy for Everyone
— 2025 at a glance
21
people on the team — capacity nearly doubled over the year
86%
support contract renewal rate, with more multi-year agreements
66%
of project-funded contributions to the Library authored by the Corporation
400+
attendees at the inaugural OpenSSL Conference in Prague
— From the President

Community engagement.

Since the adoption of the OpenSSL Mission, our focus has been on engaging more closely with our diverse communities. During the last year, our activities reflected what we have learnt from listening — and from working on the areas where we need to improve.

The OpenSSL Corporation provides the majority of the funding for all dedicated OpenSSL Project activities, on the basis of revenue from commercial support contracts. All of the Corporation's budget, and over 70% of the budget of our sister organisation the OpenSSL Foundation, depends on that revenue.

During 2025 we authored more than two-thirds of all project-funded contributions to the OpenSSL Library, contributed funding for the OpenSSL Jostle project, donated new testing infrastructure to the cryptsetup project, and funded the majority of the OpenSSL Conference 2025. As part of those increased activities, we grew our small team to 21 people.

We made staff more accessible by participating in a wide variety of community events across Europe and the US — and by officially opening an office in Brno and hosting the inaugural OpenSSL Conference in Prague.

Tim Hudson
Tim Hudson
President, OpenSSL Corporation
Grand opening of the OpenSSL Corporation headquarters in Brno
Grand opening of the Brno headquarters · August 2025
Foundation funding
>70%
of the OpenSSL Foundation's budget is sustained by Corporation support-contract revenue.
— Finance in 2025

An investment year, close to break-even.

Revenue and expenses stayed aligned across the full year. All 2025 revenue came from commercial support contracts — with no reliance on donations, sponsorships, or one-time income.

Income
$5M USD
Derived entirely from commercial support contracts.
Expenses
$5M USD
Primarily directed at building team capacity and operations.

Where we invested

  • The OpenSSL Conference 2025 in Prague
  • Participation in community events across Europe and the US
  • Sponsorship of selected community activities
  • Continued investment in FIPS 140-3 certification
  • The new headquarters office in Brno, Czech Republic
Revenue model
Predictable & self-funded
We managed budgets for the whole year and avoided drawing on cash reserves to fund normal operations.
Anton Arapov
Anton Arapov
Operations Manager
— Operations & support

Scaling capacity without losing quality.

Ticket volume increased substantially as more customers relied on us during migrations to newer Library releases. We spread responsibility across a broader team — and responsiveness improved even as load grew.

86%
Support renewal rate
+267%
New tickets year over year
−32%
Median full resolution time
−12%
Median first resolution time
— Engineering

Major updates of the year.

  • Expanded QUIC support (server-side and third-party)
  • Post-quantum cryptography: ML-KEM, ML-DSA, SLH-DSA and hybrid KEM in TLS 1.3
  • OpenSSL Library 3.1.2 achieved FIPS 140-3 validation
  • OpenSSL Library 3.5 submitted for FIPS 140-3 validation
Tomas Vavra
Tomas Vavra
Engineering & Standards Manager
Release cadence
Predictable, time-based
Two on-time feature releases shipped in 2025, with the first major release in five years now in development.
3.5
April 2025
Feature release with expanded PQC and QUIC support.
3.6
October 2025
Second on-time feature release of the year.
4.0
In development
First major release in five years — targeting 2026.
— Community & projects

Collaboration across the ecosystem.

We strengthened technical alignment and long-term sustainability across widely used cryptographic libraries — holding two in-person coordination meetings and embedding partner projects into the OpenSSL Conference.

cryptlib
Cross-project alignment with founder and maintainer Peter Gutmann, integrated into the OpenSSL Conference.
Bouncy Castle
Technical coordination and knowledge exchange with the Bouncy Castle engineering team.
cryptsetup
Supported with resources including a continuous-integration server to enable modern development practices.
OpenSSL Jostle
A Java cryptography provider connecting the OpenSSL Library with the Java ecosystem.
OpenSSL Corporation staff engaging with the community at the OpenSSL Conference
Meeting the community at the OpenSSL Conference 2025
— OpenSSL Conference 2025

The first global OpenSSL community conference.

There had never been a global OpenSSL community conference before 2025 — that changed in Prague, bringing together the people doing the real work across cryptography, cybersecurity, open source, enterprise security, and governance.

400+
Attendees
30+
Countries represented
110+
Speakers
95+
Sessions
5
Panel discussions
4
Conference tracks
3
Conference days
4.8/5
Overall rating
— Moving forward 2026

The year ahead.

  • OpenSSL Library 4.0 — the first major release in five years, with modernised coding style, removal of deprecated legacy APIs, and expanded PQC support
  • Continued FIPS 140-3 validation efforts, including validation for 4.0
  • Operating OpenSSL Conference 2026 as the central global meeting point for the community
  • A shift toward sales and new customer growth, building on the capacity established in 2025
Annual Report 2025

Read the full report.

The complete Annual Report 2025 covers governance, engineering, finance, support, and community in full detail.