Loading
Loading
Government software is often built repeatedly at public expense and cannot be reused between States.
The same portal is paid for many times over, and its failures cannot be independently examined.
Advocate open source by default for citizen-facing government software, with clearly stated security exceptions.
We publish our own platform source as the demonstration, including its security documentation.
Risk
Open code exposes vulnerabilities to attackers as well as to reviewers.
Mitigation
Never publish secrets or configuration. Maintain a responsible disclosure process. Security through design, not obscurity.