Hannah Braswell

OpenSSF Community Day North America First-time Experience

Wed, 22 Jul 2026 00:00:00 +0000

Authored blog post on the OpenSSF blog telling the story of my experience presenting at my first OpenSSF Community Day. I walkthrough the experience, what I learned, and why I’ll be back shortly for the future events.

Read the full post on openssf.org

https://openssf.org/blog/2026/07/22/openssf-community-day-north-america-na-first-time-experience/

About

Sat, 11 Jul 2026 00:00:00 +0000

Hi, I’m Hannah

I’m an Associate Product Security Engineer at Red Hat, focusing on proactively securing complex open-source systems. Most of my work is internal platform tooling development and open source enablement. I hold a B.S. in Computer Engineering from NC State University, and bring a deep background in microarchitecture and embedded systems to my work across the open-source ecosystem.

As an active contributor to several projects and Working Groups within the OpenSSF, I’m passionate about pragmatic development and using automation to enhance security workflows. I’m the Community Manager for the OpenSSF Gemara Project and excel at making technical concepts digestible for all audiences.

Hello, World

Sat, 11 Jul 2026 00:00:00 +0000

Hi, I’m Hannah. Welcome to my portfolio of professional work throughout my role as a Product Security Engineer and Open Source Community Manager.

Check out my LinkedIn or GitHub.

Projects

Sat, 11 Jul 2026 00:00:00 +0000

A selection of projects I’ve built or contributed to.

Gemara AI

Maintainer

A Claude Code plugin for authoring and validating Gemara security artifacts. It bundles an MCP server exposing validate_gemara_artifact and migrate_gemara_artifact alongside the Gemara lexicon and schema resources, plus an interactive authoring skill that triages what artifact you need and walks you through building it.

Wizards cover threat catalogs, control catalogs, risk catalogs, policies, and mapping documents across Gemara layers 2 and 3 — turning schema-heavy compliance documents into a guided conversation instead of hand-written YAML.

Talks

Sat, 11 Jul 2026 00:00:00 +0000

Talks and presentations I’ve given at conferences and meetups.

Gemara: the GRC Architecture You Didn’t Know You Built

Event: OpenSSF Community Day NA — April 2026

Video

OSCAL in Action: Real World Examples of Automating Policy and Compliance

Event: KubeCon NA Open Source SecurityCon — October 2025

Video

Introducing the Gemara Model

Mon, 09 Mar 2026 00:00:00 +0000

Co-authored post on the OpenSSF blog introducing the Gemara model — a new approach to GRC architecture for open source security.

Read the full post on openssf.org