OpenSearch foundation launches long-term support programme

The OpenSearch Software Foundation has launched a long-term support programme for the OpenSearch project, backed initially by BigData Boutique, Eliatra and Resolve Technology.

The programme is intended to give users defined support lifecycles, security standards and access to accredited commercial support providers. It creates a formal structure for organisations using OpenSearch in production search, observability, analytics and vector database deployments.

Under the model, each major version will have at least one designated long-term support release with a minimum of 18 months of support. The programme begins with OpenSearch 2.1.9 and 3.6.

It also sets security requirements for supported releases. Medium- and high-severity vulnerabilities must be addressed within 60 days of public disclosure, and users will receive early notifications about security vulnerabilities.

Another part of the programme focuses on software supply chain visibility. The foundation scans roughly 150 OpenSearch repositories to build software bills of materials, or SBOMs, to help organisations show the provenance and security status of OpenSearch deployments.

The scheme is based on a vendor-neutral accreditation model. Providers can offer foundation-approved commercial long-term support services, but all development for long-term support releases must be contributed upstream to the open source project.

The requirement is intended to preserve a single codebase for the wider community rather than create separate proprietary branches. For enterprise users, it offers a route to paid support without tying them to a single supplier.

A recent Linux Foundation Research report found that enterprises see a 2-5x return on investment from open source engagement. OpenSearch is already used at scale by organisations including Atlassian and Uber, and the foundation argues that the new programme should make adoption easier for companies with stricter operational and compliance requirements.

"This approach reflects growing enterprise demand for open source infrastructure that combines flexibility with reliability, particularly as organizations deploy AI-driven and mission-critical workloads," said Bianca Lewis, executive director of the OpenSearch Software Foundation. "Long-term support versions give enterprises predictable support, trusted security practices, and certified vendor options, making it easier to deploy and scale OpenSearch with confidence without sacrificing the benefits of open source."

Analyst View

Industry analysts said the programme addresses a common concern among large users of open source software: how to secure predictable support and accountability without giving up the governance model that drew them to the project in the first place.

"The long-term support program addresses a long-standing enterprise need for access to reliable, production-grade support without compromising vendor neutrality," said Partha Chakraborty, senior lead analyst at ISG. "Through a formal accreditation model, the Foundation enables qualified providers to deliver Foundation-approved commercial long-term support offerings while ensuring all fixes and enhancements are contributed upstream for the benefit of the entire community."

The launch also coincides with the release of OpenSearch 3.6, which the foundation described as the first long-term support version. According to the foundation, that release supports AI-powered search features and the OpenSearch Observability Stack.

ISG also linked the release to broader enterprise efforts to combine search, monitoring and AI-related workloads on fewer platforms. "As systems become more distributed and AI-driven, visibility and relevance can no longer exist in silos," said Jan Erik Aase, partner and global head at ISG. "OpenSearch 3.6 moves the industry forward by unifying observability, search and AI execution into a single, intelligent operating layer, enabling enterprises to innovate faster while maintaining control and understanding at scale."

Provider Backing

The first accredited providers used the launch to highlight demand from customers running production systems on OpenSearch. Their comments centred on security response, operational accountability and the need for a documented support path.

"Enterprises running mission-critical and AI-driven workloads on OpenSearch need more than promises from open source. They need proven operational excellence, fast and reliable CVE response, and continuous security patching they can trust. BigData Boutique has been doing exactly that for years, supporting many enterprise customers in production with our Enterprise Distribution of OpenSearch and true 24/7 expert support. The new LTS program is a major ecosystem milestone. It formalizes the standards we already uphold and puts the OpenSearch Software Foundation's stamp behind them, reinforcing our position as the trusted partner for running OpenSearch securely, reliably and at scale," said Itamar Syn-Hershko, founder of BigData Boutique and OpenSearch ambassador.

"Open source only works when the community shows up for it. Becoming an OpenSearch Software Foundation-certified LTS provider is how we show up. Our customers run OpenSearch in production environments where a surprise CVE or an unsupported version is not an option. They need a partner who is accountable, not just available. This program gives that commitment structure, and it gives our customers something they can take to their security teams with confidence. It also reinforces our long-term mission to empower search teams through strategic consulting and hands-on implementation and support. We have been in this ecosystem long enough to know that vendor-neutral, community-backed infrastructure is the right bet. This is us putting our name behind that," said David Bennett, managing director of Eliatra.

"Enterprise teams have been asking for the ability to point to a certified vendor, a documented SLA and a clear upgrade path for OpenSearch, and the LTS program will be a deciding factor for organizations on the fence about making the switch. What drew us to the LTS program is that it does not ask you to trade open source freedom for enterprise stability. You get both. We are proud to be among the first vendors certified, and we are looking forward to helping more organizations make the move with confidence," said Leo Wong, founder of Resolve Technology.