Open Source Summit Europe 2025: Full Schedule

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

arrow_back View All Dates

11:00 CEST

The Security Guardian: Using OpenSearch for Real-Time Threat Detection - Meha Bhalodiya, Red Hat

Wednesday August 27, 2025 11:00 - 11:40 CEST

Emerald Room

Imagine this: your systems are humming along smoothly when, without warning, an unseen adversary slips through the cracks. A small vulnerability leads to a large-scale security breach. Could it have been prevented? Absolutely—with the right tools and strategy.

In this session, I’ll embark on an interactive journey into how OpenSearch becomes the vigilant guardian of your infrastructure. Starting with real-world scenarios, we'll explore how to harness OpenSearch’s powerful features to detect anomalies, correlate logs, and respond to threats in real-time.

You’ll see how simple queries can expose hidden patterns, dashboards can visualize attack vectors, and machine learning models can predict threats before they occur. But it’s not just about the tools—we’ll dive into best practices for deploying OpenSearch in complex environments and ensuring it scales with your security needs.

Join me to learn how OpenSearch transforms security operations, turning chaos into clarity and ensuring you stay one step ahead of cyber threats.

Speakers

Meha Bhalodiya

Software Quality Engineer, Red Hat

A Software Quality Engineer at Red Hat, where I work with the OpenShift Container Platform team.

Wednesday August 27, 2025 11:00 - 11:40 CEST
Emerald Room

Cloud & Containers

Audience Experience Level Any

11:55 CEST

Deploy AI in 20MB: Lightweight Containers for Open Source Developers - Miley Fu, Second State

Wednesday August 27, 2025 11:55 - 12:35 CEST

Emerald Room

Containerization has enabled powerful deployment workflows—but traditional Linux containers can be heavyweight, especially for LLMs or AI workloads on resource-restraint environments.

This session introduces WebAssembly as an alternative for deploying small, single-purpose AI functions. We’ll demonstrate how to build a simple AI service in Rust, compile it to Wasm, and compare the runtime footprint and deployment model with a traditional Python or Linux container-based equivalent. The focus will be on practical constraints: image size, memory use, startup time, and runtime isolation. We’ll also walk through running them (along open source LLMs) in sandboxed environments, even without root access, and why this matters for cross-platform efficient and secure deployment. The session is geared toward beginners who may already be familiar with Docker but are looking for faster, more portable alternatives to run open source LLMs in real-world environments.

Ideal for devs exploring open-source AI tooling, local-first agents, or edge inferencing.

Speakers

Miley Fu

Founding Member, Second State

Miley is the co-chair and keynote speaker for KubeCon+Open Source Summit and AI Dev 2024. With over 6 years of experience working on WasmEdge runtime in CNCF sandbox as a founding member, she talks at KubeCon, KCD Shenzhen, CloudDay Italy, DevRelCon, Open Source Summit Japan, AWS... Read More →

Wednesday August 27, 2025 11:55 - 12:35 CEST
Emerald Room

Cloud & Containers

Audience Experience Level Beginner

14:10 CEST

Another Cluster Bites the Dust... and That’s Just Fine! - Davide Bianchi & Graziano Casto, Mia-Platform

Wednesday August 27, 2025 14:10 - 14:50 CEST

Emerald Room

Why keep your cluster alive when you’re not using it? Let it bite the dust, every night, and that’s just fine. With Crossplane and kube-green, you can unlock ephemeral environments that spin up when you code and shut down when you rest. Imagine a development setup that dynamically provisions complex infrastructure for testing, then automatically scales down during off-hours – like nights and weekends.

In this talk, we’ll show you how Platform Engineering can orchestrate this smart, on-demand model, so developers can focus on building applications, not babysitting clusters. You’ll see the integration in action, explore the impact on cost, efficiency, and sustainability, and discover how to shift from static uptime to dynamic, eco-friendly infrastructure. Save money, reduce emissions, and let your clusters rest – because we will rock you, but not all night long.

Speakers

Davide Bianchi

Principal Engineer, Mia-Platform

Principal Engineer at Mia-Platform. Passionate about Open Source and Green Software in the Cloud Native world.

Graziano Casto

DevRel Engineer, Mia-Platform

Graziano is a software engineer and passionate about agile development and product management. Formerly a developer of distributed systems in enterprise environments and a product manager, he focuses on sharing the myriad beauties of the cloud-native world. Active in international... Read More →

Wednesday August 27, 2025 14:10 - 14:50 CEST
Emerald Room

Cloud & Containers

Audience Experience Level Beginner

15:05 CEST

NeoNephos' OpenMFP and Platform Mesh: Building Composable Enterprise Architectures - Bastian Echterhölter & Mirza Kopic, SAP SE

Wednesday August 27, 2025 15:05 - 15:45 CEST

Emerald Room

OpenMFP addresses the critical challenge of fragmented user experiences in enterprise environments by establishing a unified architectural framework for micro frontend composition. The platform creates seamless digital UX by standardizing how distributed UI components integrate while preserving team autonomy and eliminating redundancies of core functionalities.

Platform Mesh establishes interoperability between multiple providers by building upon the Kubernetes API and resource model. Developers and admins can discover, access, and order services from various sources through their beloved kubectl.

The architectural implementation leverages a GraphQL layer that orchestrates resources through the Kubernetes Resource Model (KRM), secured by a fine grained authorization approach (ReBAC) with OpenFGA.

These complementary technologies power diverse applications: Internal Developer Platforms, enterprise marketplaces and self-service portals. We'll demonstrate how NeoNephos projects reduce cognitive load, accelerate development, and support European cloud sovereignty. The talk shows how open source solutions are reshaping enterprise platform patterns through composable architecture.

Speakers

Bastian Echterhölter

Principal Software Engineer and Lead Architect, SAP SE

Bastian is a Principal Software Engineer and Lead Architect the OpenMFP NeoNephos project, bringing 18 years of professional experience across consulting and product development. His work centers on cloud native technologies, DevOps practices, and enhancing Developer Experience, with... Read More →

Mirza Kopic

Principal Software Engineer and Lead Architect, SAP SE

Mirza Kopic is a Principal Engineer and Lead Architect with ApeiroRA Platform Mesh project. Previously Mirza has worked in many different roles, including managing global analytics teams, working with Machine Learning teams and leading diverse projects in the that involve kubernetes... Read More →

Wednesday August 27, 2025 15:05 - 15:45 CEST
Emerald Room

Cloud & Containers

Audience Experience Level Any

16:20 CEST

Integrating EPSS and CVSS in Open Policy Agent To Quarantine Real-world Vulnerabilities - Nigel Douglas, Cloudsmith

Wednesday August 27, 2025 16:20 - 17:00 CEST

Emerald Room

CVSS (Common Vulnerability Scoring System) and EPSS (Exploit Prediction Scoring System) are both valuable tools for vulnerability management, but they serve different purposes. CVSS assesses the inherent severity of a vulnerability, whereas EPSS estimates the likelihood of that vulnerability being exploited in the wild. At Cloudsmith, we integrate open source projects like EPSS and the Trivy scanner for CVSS analysis into Open Policy Agent (OPA) to strengthen supply chain enforcement.

In this session, we’ll examine four recent CVEs that highlight the contrast between these two approaches—cases where vulnerabilities score highly under CVSS but have a low EPSS probability, and others with high EPSS scores (indicating strong exploit potential) that had not yet been published in the NIST CVE database at the time of artifact scanning. These examples underscore the importance of leveraging both CVSS and EPSS in a comprehensive vulnerability management strategy.

We’ll also explore how open-source tools like OPA can be used to enforce these security controls effectively within the software supply chain.

Speakers

Nigel Douglas

Head of Developer Relations, Cloudsmith

Nigel Douglas is the Head of Developer Relations at Cloudsmith. He champions Cloudsmith’s developer ecosystem by creating compelling educational content, engaging with developer communities, and promoting Cloudsmith as the go-to solution for artifact management and supply chain... Read More →

Wednesday August 27, 2025 16:20 - 17:00 CEST
Emerald Room

Cloud & Containers

Audience Experience Level Intermediate