# NVIDIA and Partner Companies Launch the Open Secure AI Alliance

**NVIDIA and a wide range of partner companies launched the Open Secure AI Alliance to build and share open tools that help defenders secure AI systems.**

## What the alliance is
NVIDIA announced the Open Secure AI Alliance on its blog, describing it as a movement "to develop and share open technologies, techniques and tools to safeguard software and agents in the age of AI." The alliance builds on the Linux Foundation's Akrites initiative and OpenSSF community work. Inaugural partners named in [NVIDIA's announcement](https://blogs.nvidia.com/blog/open-secure-ai-alliance/) span cloud computing, cybersecurity, enterprise software, open source foundations, and AI research, including Adobe, Akamai, Atlassian, Cisco, Cloudflare, CrowdStrike, Databricks, GitHub, Hugging Face, IBM, Microsoft, Palo Alto Networks, Red Hat, Salesforce, and dozens more.

## Why NVIDIA says open tools matter for defense
NVIDIA frames this as a choice about where AI defenses will live: locked inside a handful of opaque systems, or built from open models, harnesses, and tools that defenders can inspect, adapt, and run themselves. NVIDIA acknowledges open models can be misused, including attempts to weaken safeguards, but argues those risks are not unique to open systems and must be managed wherever advanced AI runs. It points to a recent Hugging Face security incident as the clearest example: when closed AI tools could not tell attackers from defenders and blocked essential forensic analysis, Hugging Face instead ran the open-weight GLM 5.2 model on its own infrastructure, analyzing more than 17,000 actions to contain the intrusion.

## What each partner is contributing
NVIDIA is contributing open models, model weights, training data, and new agent-harness research to the alliance. This includes NOOA — the NVIDIA Labs Object-Oriented Agent project — which NVIDIA has open sourced on GitHub to make it easier to test, trace, audit, and govern how an agent behaves. HPE is contributing to SPIFFE/SPIRE, a zero-trust identity framework for verifying AI agents and services. Hugging Face has offered Safetensors, a safe model-weight storage format with no remote code execution, to the PyTorch Foundation. IBM and Red Hat's Lightwell extends supply-chain security with digitally signed patches. Microsoft's MDASH tool coordinates several specialized AI agents at once, using them to find, debate, and prove out exploitable bugs. SpaceXAI has open sourced its Grok Build terminal-based coding agent and plans to open source the weights of its Grok line of models.

## A message to policymakers
NVIDIA calls on policymakers and regulators to treat open models, harnesses, and security tooling as defensive assets, not weaknesses, warning that blanket restrictions on open frontier AI systems would weaken defensive capacity and risk concentrating power in a handful of closed providers. It urges companies and governments to invest in shared open infrastructure for AI defense, including datasets, evaluation frameworks, attack simulators, and red-teaming tools.

## Key facts
- NVIDIA and a wide range of partner companies — including Adobe, Cisco, GitHub, Hugging Face, IBM, Microsoft, Red Hat, and Salesforce — are inaugural members of the Open Secure AI Alliance.
- The alliance builds on the Linux Foundation's Akrites initiative and OpenSSF community work.
- During a recent security incident, Hugging Face used the open-weight GLM 5.2 model on its own infrastructure to analyze more than 17,000 actions and contain the intrusion.
- NVIDIA's contribution includes the new open source NOOA agent-harness project, now available on GitHub.
- Other contributions include HPE's SPIFFE/SPIRE identity work, Hugging Face's Safetensors format, IBM and Red Hat's Lightwell, Microsoft's MDASH scanning tool, and SpaceXAI's Grok Build coding agent.

## Check your understanding
Which security incident does NVIDIA cite as evidence that defenders need open, frontier AI tools?
What is NVIDIA's own contribution to the Open Secure AI Alliance, and where is it available?

## Sources
- [NVIDIA Blog: Open Secure AI Alliance](https://blogs.nvidia.com/blog/open-secure-ai-alliance/)

---

- Category: know (industry)
- Affects: —
- Published: 2026-07-27T00:00:00.000Z
- Original: https://blogs.nvidia.com/blog/open-secure-ai-alliance/
- Generated by tinker news