Welcome to the LibreKAT Foundation

My article Sovereignty is not ideology, it is security policy has been published in AG Connect 5 (2026). Using the US sanctions against the International Criminal Court as a case, it shows that digital dependency is a concrete information security risk.

A foreign government does not need to hack a server to bring an organisation’s IT to a halt; a sanctions decision can be enough. Karim Khan, Chief Prosecutor of the International Criminal Court, lost his Microsoft workplace, and the Dutch service provider ProcoliX informed the Court that it had to stop its services. That directly affects the three goals of information security: availability, integrity and confidentiality.

OpenKAT 1.23, released under the name Cody, is now available. This release shows more of what is out there: more software, more context around leaks and more results from external sources. OpenKAT also runs on new platforms and scales better in large environments.

OpenKAT now recognises software from Shodan banners, nmap results (CPEs) and service banners, including over IPv6. This gives a more complete picture of what is running on systems. Version 1.23 also uses a newer version of the Playwright browser to take more complete snapshots of web pages, which reveals more of the software in use.

This morning (7 October 2026), SAFARI was presented to an audience of 325 auditors from the Dutch Tax and Customs Administration. SAFARI is an open methodology that helps organisations assess and substantiate their digital sovereignty systematically.

Digital sovereignty concerns the control an organisation actually has over its digital services, data and suppliers. Can it make its own choices? Can it continue operating if a supplier, technology or part of the supply chain becomes unavailable? And can it demonstrate which laws govern its data and systems?