Blog

Articles and updates from the LibreKAT Foundation.

Core value: freedom and openness

15 July 2026 Brenno de Winter

For LibreKAT, freedom and openness are not a decoration around technology. They are conditions for trust. Those who depend on systems that cannot be studied, questioned or adjusted ultimately have to rely on promises. Open technology makes it possible to verify those promises.

Open source is important, but not magical. Open source code does not automatically mean that software is safe, mature or suitable. It does mean that users have rights: view, test, modify, improve and share. That changes the balance of power. An organization does not have to be completely tied to the original supplier if the rate, price or conditions change.

Core value: humanity and respect

15 July 2026 Brenno de Winter

There are people behind every system. People who write code, manage systems, investigate reports, make mistakes, implement policies, and experience consequences. Information security without humanity quickly becomes harsh, procedural and blind to the reality in which technology is used.

Humanity and respect mean that safety is not organized across people, but with people. Users are not a difficult factor in an otherwise perfect architecture. They are part of the system. A measure that structurally frustrates people, is unclear or is only understood by specialists, leads to detours and a false sense of security.

Core value: integrity and independence

15 July 2026 Brenno de Winter

Integrity and independence determine whether research, advice and technology can be reliable. Not because people never have interests, but because those interests must be visible, manageable and subordinate to public values. For LibreKAT this means that choices are testable and are not driven by commercial dependencies that color the outcome in advance.

In information security, integrity also has a technical meaning: data and systems must be correct and must not be changed unnoticed. That meaning fits well with the organizational side. Decision-making must also be honest. Anyone who advises a security measure, points out a vulnerability or assesses a dependency must be able to explain the facts, standards and considerations that underlie it.

Core value: just culture

15 July 2026 Brenno de Winter

Just culture means that mistakes are opportunities to learn, not automatic reasons to punish. That is not a plea for non-binding. It is actually a way to better organize responsibility. An organization that only looks for guilty parties learns less than an organization that investigates why an error could occur.

This is crucial in digital security. Incidents rarely arise from one action by one person. Work pressure, unclear procedures, inadequate tooling, missing training, supplier dependence or poor design often play a role. If the analysis stops at an employee’s last click, the real causes remain.

Core value: knowledge sharing and collaboration

15 July 2026 Brenno de Winter

Knowledge is only valuable if it can circulate. Information security is too important to get locked up in separate reports, closed methods or dependencies on a few specialists. LibreKAT therefore sees knowledge sharing and collaboration as the core of digital resilience.

Digital infrastructure is a chain. No organization is separate from suppliers, software components, standards, hosting parties, users and regulators. If risks spread through chains, knowledge must be able to do the same. A vulnerability, a migration lesson or a good contract clause becomes more valuable when others can take it further.

Core value: listening and connecting

15 July 2026 Brenno de Winter

True collaboration starts with listening. That sounds obvious, but in digital security people often jump to solutions too quickly. There is a scan, a standard, a tool, a dashboard or a contract. These can all be useful. But without a good understanding of context, there is a risk that we provide a technical answer to an administrative, social or legal question.

Listening means that users, administrators, directors, lawyers, suppliers and researchers are taken seriously in their own expertise. The user knows where the work gets stuck. The administrator knows the historical choices in the system. The lawyer sees jurisdiction and liability. The driver must weigh risks. The researcher sees patterns. Connecting is bringing that knowledge together.

Core value: reliability and safety

15 July 2026 Brenno de Winter

Reliability is safety that lasts in practice. A system can have many security measures and still be unreliable if no one knows how it is set up, if recovery has not been tested or if dependencies only become visible when something goes down. For LibreKAT, reliability and safety are therefore inseparable.

Reliable technology is verifiable. This means that operation, configuration, logging, dependencies and changes are transparent. Not every detail needs to be understandable to everyone, but the organization must be able to demonstrate how critical functions are protected and who can intervene and when.

Core value: safety first

15 July 2026 Brenno de Winter

Safety first sounds simple, but it is a tough choice. It means that information security is not added at the end of a project nor should it be allowed to disappear behind convenience, speed or marketability. Safety is the starting point for design, implementation and accountability.

The wording is deliberately close to aviation. In aviation, safety first is not a poster slogan, but a way of working: standard procedures, checklists, crew resource management, reporting culture, training, incident investigation and the discipline not to normalize unnecessary risk under time pressure. A flight is not safe because nothing went wrong, but because people, processes and technology are arranged so that errors are caught, deviations are reported and lessons return to operations.

Core value: sovereignty and autonomy

15 July 2026 Brenno de Winter

Digital sovereignty is about control. Not about doing everything yourself, not about digital self-sufficiency and not about distrust as a basic attitude. The core question is simpler and more administrative: who ultimately has the final say on data, systems, continuity and access?

Autonomy is close to this, but is not the same. Autonomy is the ability to act independently. Sovereignty is the power and practical ability to make choices and to enforce those choices. An organization can consciously collaborate and still remain sovereign, as long as it knows what it is handing over, why it is acceptable and how it can act if circumstances change.

Core value: sustainability and continuity

15 July 2026 Brenno de Winter

Sustainability and continuity are about the long term. Digital infrastructure must not only work today, but must also be able to be maintained, transferred and continued responsibly. For LibreKAT this is a core value because public digital infrastructure is too important to be dependent on coincidental energy, coincidental people or coincidental financing.

Continuity starts with portability. If knowledge only resides with one developer, supplier or volunteer, a project is vulnerable. Documentation, clear governance, version control, release processes and a healthy community are not peripheral issues. They determine whether software can continue to exist when individuals leave.