YES Program Benefits Comparison Compare all four YES tiers to find the right level of support and influence for your organization.
Upstream Verification & Compliance All YES members (Builder tier and above) receive these verification and compliance assets:
Upstream Verification & Compliance Benefit All Tiers Cryptographically signed, SLSA Level 3 binaries (go-yaml, pyyaml, libyaml, and yaml-serde) Upstream-signed CycloneDX and SPDX SBOM compliance documentation Upstream-signed VEX data to programmatically clear security alerts
Core Benefits All YES members receive these benefits regardless of tier:
Core Benefit All Tiers 48-hour early security notifications Security bulletins with fix timelines Help decide what YAML builds next YES badge and logo usage rights Recognition on yaml.com Access to YES member forum Quarterly virtual town halls
Tier Comparison YES Builder YES Member YES Partner YES Leader Upstream Verification & Compliance Core Benefits Additional Benefits Choose 1 Choose 2 Choose 4 Choose 6 Recognition Level Builder Member Partner Leader
Additional Benefit Options Support & Training Benefit Builder Member Partner Leader 5 support hours 10 support hours 25 support hours 50 support hours Virtual training (half-day) Virtual training (full-day) All virtual training workshops On-site training (1 day) On-site training/consulting (2 days)
Security & Audits Benefit Builder Member Partner Leader Quarterly security review Annual YAML stack audit Annual audit + quarterly reviews Emergency hotline access
Strategic Access Benefit Builder Member Partner Leader Monthly planning participation Quarterly 1-on-1 with Ingy (virtual) Quarterly 1-on-1 with Ingy (in-person avail) Custom feature request priority Custom feature development input
Events & Marketing Benefit Builder Member Partner Leader Conference booth session Conference booth sessions (2 events) Conference booth sessions (unlimited) Co-marketing opportunity Keynote/speaking opportunity
Technology Access Benefit Builder Member Partner Leader Beta access to new features YAMLScript early access YAMLScript enterprise license Contract development services (discounted)
Supply Chain & Compliance Benefit Builder Member Partner Leader Maintainer attestation letter Release schedule commitment Custom compliance documentation
À La Carte Services All YES members can purchase additional services at member-preferred rates:
Extra support hours Additional training workshops Comprehensive YAML stack audits YAMLScript implementation consulting Contract development work Custom security assessments Pricing available upon request based on scope and requirements.
How to Choose Choose YES Builder if: You need baseline supply chain compliance assets (SBOM, VEX, SLSA Level 3) for your build pipelines You want to verify and secure the essential open-source YAML infrastructure in your stack You require direct access to cryptographically signed upstream binaries Standard click-wrap Terms of Service fit your procurement workflow Choose YES Member if: YAML is important but not mission-critical in your stack You need occasional expert support and guidance You want to contribute to YAML sustainability while gaining value Budget is a primary consideration Choose YES Partner if: YAML is critical to your product or stack You need regular strategic guidance and support You want deeper collaboration with YAML leadership You need comprehensive security coverage Choose YES Leader if: YAML is mission-critical, business-essential in your stack You require premium support with guaranteed response You want maximum influence over what YAML builds next You need a true partnership relationship Ready to Join? Contact Us About YES →
Or learn more about each tier: