YES Program Benefits Comparison
Compare all four YES tiers to find the right level of support and influence for your organization.
Upstream Verification & Compliance
All YES members (Builder tier and above) receive these verification and compliance assets:
| Upstream Verification & Compliance Benefit | All Tiers |
Cryptographically signed, SLSA Level 3 binaries (go-yaml, pyyaml, libyaml, and yaml-serde) | |
| Upstream-signed CycloneDX and SPDX SBOM compliance documentation | |
| Upstream-signed VEX data to programmatically clear security alerts | |
Core Benefits
All YES members receive these benefits regardless of tier:
| Core Benefit | All Tiers |
| 48-hour early security notifications | |
| Security bulletins with fix timelines | |
| Help decide what YAML builds next | |
| YES badge and logo usage rights | |
| Recognition on yaml.com | |
| Access to YES member forum | |
| Quarterly virtual town halls | |
Tier Comparison
| YES Builder | YES Member | YES Partner | YES Leader |
| Upstream Verification & Compliance | | | | |
| Core Benefits | | | | |
| Additional Benefits | Choose 1 | Choose 2 | Choose 4 | Choose 6 |
| Recognition Level | Builder | Member | Partner | Leader |
Additional Benefit Options
Support & Training
| Benefit | Builder | Member | Partner | Leader |
| 5 support hours | | | | |
| 10 support hours | | | | |
| 25 support hours | | | | |
| 50 support hours | | | | |
| Virtual training (half-day) | | | | |
| Virtual training (full-day) | | | | |
| All virtual training workshops | | | | |
| On-site training (1 day) | | | | |
| On-site training/consulting (2 days) | | | | |
Security & Audits
| Benefit | Builder | Member | Partner | Leader |
| Quarterly security review | | | | |
| Annual YAML stack audit | | | | |
| Annual audit + quarterly reviews | | | | |
| Emergency hotline access | | | | |
Strategic Access
| Benefit | Builder | Member | Partner | Leader |
| Monthly planning participation | | | | |
| Quarterly 1-on-1 with Ingy (virtual) | | | | |
| Quarterly 1-on-1 with Ingy (in-person avail) | | | | |
| Custom feature request priority | | | | |
| Custom feature development input | | | | |
Events & Marketing
| Benefit | Builder | Member | Partner | Leader |
| Conference booth session | | | | |
| Conference booth sessions (2 events) | | | | |
| Conference booth sessions (unlimited) | | | | |
| Co-marketing opportunity | | | | |
| Keynote/speaking opportunity | | | | |
Technology Access
| Benefit | Builder | Member | Partner | Leader |
| Beta access to new features | | | | |
| YAMLScript early access | | | | |
| YAMLScript enterprise license | | | | |
| Contract development services (discounted) | | | | |
Supply Chain & Compliance
| Benefit | Builder | Member | Partner | Leader |
| Maintainer attestation letter | | | | |
| Release schedule commitment | | | | |
| Custom compliance documentation | | | | |
= Can be selected as one of your tier's choices
À La Carte Services
All YES members can purchase additional services at member-preferred rates:
- Extra support hours
- Additional training workshops
- Comprehensive YAML stack audits
- YAMLScript implementation consulting
- Contract development work
- Custom security assessments
Pricing available upon request based on scope and requirements.
How to Choose
Choose YES Builder if:
- You need baseline supply chain compliance assets (SBOM, VEX, SLSA Level 3) for your build pipelines
- You want to verify and secure the essential open-source YAML infrastructure in your stack
- You require direct access to cryptographically signed upstream binaries
- Standard click-wrap Terms of Service fit your procurement workflow
Choose YES Member if:
- YAML is important but not mission-critical in your stack
- You need occasional expert support and guidance
- You want to contribute to YAML sustainability while gaining value
- Budget is a primary consideration
Choose YES Partner if:
- YAML is critical to your product or stack
- You need regular strategic guidance and support
- You want deeper collaboration with YAML leadership
- You need comprehensive security coverage
Choose YES Leader if:
- YAML is mission-critical, business-essential in your stack
- You require premium support with guaranteed response
- You want maximum influence over what YAML builds next
- You need a true partnership relationship
Ready to Join?
Contact Us About YES →
Or learn more about each tier: