StepSecurity
10,000 Open-Source Projects Now Secured by Harden-Runner Community-Tier: A Milestone Three Years in the Making
Harden-Runner has reached a significant milestone, now protecting over 10,000 open-source repositories as the community tier continues to be free for public projects. The journey began when the service launched in March 2022, with the aim of bringing endpoint-style runtime security to CI/CD runners. By the end of 2024, 5,000 open-source repositories were protected, and by the end of 2025 the figure had doubled to 10,000 repositories, a growth the team describes as a rapid acceleration in adoption.
The platform monitors over 13 million jobs weekly, reflecting a broader shift toward proactive, continuous protection of CI/CD pipelines rather than reactive incident response. Harden-Runner is positioned as an EDR-style solution for CI/CD runners, inspecting runtime behaviour, blocking malicious activity, and extending security controls to both GitHub-hosted and self-hosted environments.