SPONSORSHIP.md

GitHub Sponsorship Program

Thank you for your contributions to the OWASP Nest project! This document outlines how to set up GitHub Sponsors on your personal account as the first step toward participating in our Sponsorship Program.

---

Phase 1 — Set Up GitHub Sponsors on Your Personal Account

Note

Official Docs: Setting up GitHub Sponsors for your personal account

This is a one-time setup. GitHub needs to verify your identity and set up your payout method before your profile goes live.

---

Step 1 — Check Your Eligibility & Region

Contributors to open source - including mentorship - may be eligible, subject to GitHub Sponsors eligibility criteria. Check if your country is supported:

• Supported regions for GitHub Sponsors

If your region isn't listed yet, you can join the waitlist on the same page.

---

Step 2 — Enable Two-Factor Authentication (2FA)

GitHub requires 2FA before you can become a sponsored developer. If you haven't enabled it yet, go to Settings → Password and authentication.

• Configuring two-factor authentication

---

Step 3 — Apply for GitHub Sponsors

Go to github.com/sponsors → click Get sponsored → follow the prompts to complete your contact information. You will choose your payout method at this step (see Step 4).

Once submitted, GitHub will review your application — this typically takes a few days, though it can take longer. If your application seems stuck, contact GitHub Support directly.

---

Step 4 — Choose Your Payout Method

Note

⚠️ This must be decided at sign-up — it is difficult to change later.

GitHub offers two options:

Option A — Stripe Connect (bank account)

Most common. Your bank account region must match your country of residence. Check the official GitHub Sponsors payout documentation and supported regions for full details.

• Stripe Connect cross-border payouts — supported countries
• Double-check your identity info (name, date of birth) before submitting — it is difficult to update after the fact.

Option B — Fiscal Host

Best if Stripe isn't available in your country, or if you prefer not to connect a personal bank account. A fiscal host is an organization that receives funds on your behalf and pays you out through their system.

You will need to register with your chosen fiscal host first, then select "Use a fiscal host" during GitHub Sponsors sign-up and provide your profile URL from that platform.

GitHub currently supports these fiscal hosts:

• Open Source Collective (most commonly used)
• Hack Club
• NumFOCUS
• Open Collective Europe
• Python Software Foundation
• Radiant Earth
• Software in the Public Interest
• Software Underground

Note

Official Docs: Using a fiscal host to receive GitHub Sponsors payouts

---

Step 5 — Submit Your Tax Information

After connecting your payout method, complete a tax form from your Sponsors dashboard:

• US residents: Form W-9

• Non-US residents: Form W-8BEN

• Tax information for GitHub Sponsors

---

Step 6 — Submit for GitHub Review

Click Request approval from your Sponsors dashboard. Once approved, your profile goes live at:

https://github.com/sponsors/YOUR-USERNAME

---

Step 7 — Complete Your Sponsors Profile

After approval, go to your profile picture → Your sponsors → Dashboard → Profile details and fill in the following:

• Short bio — a brief description of who you are.

• Introduction — describe your open source work. For example:

  "I'm an OWASP Nest mentor with the Google Summer of Code, helping the next generation of open source security engineers build real-world skills."

---

Once you have completed Phase 1 and your GitHub Sponsors profile is live, you are ready to proceed to the next steps in the OWASP Nest Sponsorship Program.

If you have questions or run into any issues, feel free to open a discussion or reach out to the maintainers.