Nvidia and Technology Firms Launch Open Secure AI Alliance
Summary
Nvidia and technology firms launched the Open Secure AI Alliance to develop and share open-source AI security tools. Contributions include agent auditing, identity verification, supply-chain vulnerability remediation, and AI-assisted bug scanning.
Key points
- The alliance aims to develop and share open-source tools, models, and techniques for securing AI systems and agents.
- Nvidia contributed models, research, and NOOA, a project designed to make agent behavior easier to trace, test, and audit.
- HPE is contributing to SPIFFE/SPIRE for cryptographic verification of AI agents and services; Hugging Face is donating its Safetensors format to the PyTorch Foundation.
- IBM and Red Hat are extending supply-chain security through Lightwell, designed for automated vulnerability remediation at scale.
- Microsoft is contributing MDASH, a harness that coordinates AI agents to find, debate, and validate exploitable software bugs.
- The alliance argues that open AI systems can support cyber defense and cautions that broad restrictions on open frontier AI could weaken collective defensive capacity.
Article Details
- Event Type
- Launch of the Open Secure AI Alliance, an industry initiative to develop and share open-source tools, models, and techniques for securing AI systems and agents.
- Impact
- The alliance aims to strengthen AI security through shared defensive tools and research. Its members argue that broad restrictions on open frontier AI could weaken collective cyber defense. Nvidia cited a security incident involving OpenAI and Hugging Face in which Hugging Face used the open-weight GLM 5.2 model to review more than 17,000 actions and contain the breach.
Vendors
Hewlett Packard EnterpriseCapital One, Cisco, Cloudera, Cloudflare, Cognition, CrowdStrike, Databricks, Dell, DoorDash, Elastic, HPE, Hugging Face, IBM, LangChain, Microsoft, Naver, NetApp, Nous Research, OpenClaw, Palantir, Palo AltoHugging FaceOne, Cisco, Cloudera, Cloudflare, Cognition, CrowdStrike, Databricks, Dell, DoorDash, Elastic, HPE, Hugging Face, IBM, LangChain, Microsoft, Naver, NetApp, Nous Research, OpenClaw, Palantir, Palo Alto Networks, RedIBMCloudera, Cloudflare, Cognition, CrowdStrike, Databricks, Dell, DoorDash, Elastic, HPE, Hugging Face, IBM, LangChain, Microsoft, Naver, NetApp, Nous Research, OpenClaw, Palantir, Palo Alto Networks, Red Hat,MicrosoftCognition, CrowdStrike, Databricks, Dell, DoorDash, Elastic, HPE, Hugging Face, IBM, LangChain, Microsoft, Naver, NetApp, Nous Research, OpenClaw, Palantir, Palo Alto Networks, Red Hat, Reflection AI,NvidiaNvidia and a large group of technology, cybersecurity, and enterprise software companies announced on Monday the launch of the Open Secure AI Alliance, a new initiative aimed at developing and sharing open source tools,Red HatFace, IBM, LangChain, Microsoft, Naver, NetApp, Nous Research, OpenClaw, Palantir, Palo Alto Networks, Red Hat, Reflection AI, Salesforce, SAP, SK Telecom, ServiceNow, Siemens, Snowflake, SpaceXAI, Synopsys, ThinkingSpaceXAIPalo Alto Networks, Red Hat, Reflection AI, Salesforce, SAP, SK Telecom, ServiceNow, Siemens, Snowflake, SpaceXAI, Synopsys, Thinking Machines Lab, and TrendAI.
Products
GLM-5.2between attackers and defenders and blocked forensic work, Hugging Face used the open-weight GLM 5.2 model on its own systems to review over 17,000 actions and contain the breach.Grok BuildSpaceXAI is open-sourcing its Grok Build terminal-based AI coding agent, with plans to eventually open-source the weights of the Grok model line.
Tools
LightwellIBM and Red Hat are extending open source supply chain security through the Lightwell project, which is designed to deliver automated vulnerability remediation at scale.MDASHMicrosoft is contributing MDASH, a multi-model agentic scanning harness that coordinates AI agents to find, debate, and validate exploitable software bugs.NOOAmodels, weights, data, and agent harness research, including a newly released open source project called NOOA, designed to help harnesses make agent behavior easier to trace, test, and audit.