Jonatan Männchen | Jonatan Männchen — CISO at the Erlang Ecosystem Foundation. Securing open-source infrastructure through code, standards, and collaboration.

Jonatan Männchen — Securing Open-Source Infrastructure.

Making open source more secure through code, standards, and collaboration.

Located in the beautiful city of Winterthur, Switzerland. Working as CISO at the Erlang Ecosystem Foundation, Course Instructor at the ICT Berufsbildungscenter, and Technical Advisor to Sustema AG.

Security Work

Ægis — Supply Chain Security & Compliance Initiative for the BEAM ecosystem
EEF CNA — CVE Numbering Authority for the Erlang/Elixir ecosystem
EEF Security WG — Working group member improving BEAM security practices
Ecma TC54 — Member of the technical committee standardizing CycloneDX SBOM
OpenSSF — Member of the Open Source Security Foundation

Open Source

oidcc — Secure authentication for BEAM apps via OpenID Connect
quantum — Cron-like job scheduler for Elixir
ZipStream — Memory-efficient ZIP streaming for PHP
expo — GNU gettext parser powering Elixir internationalization
crontab — Cron expression parser with execution time calculation

Recent Highlights

Security Audit of Hex.pm — Coordinated the Alpha-Omega-funded audit of the BEAM package manager
Atom Exhaustion — Why a well-understood DoS issue keeps becoming a CVE
AI Found 5 CVEs in One Afternoon — Podcast on AI vulnerability research and the BEAM security wake-up call
Elixir OpenChain Certification — Bringing license compliance certification to the Elixir project

More writing & appearances · Talks