Industry Leaders Unite in Open Secure AI Alliance for AI Safety and Security

| Source: NVIDIA Blog

Tags: Open Secure AI Alliance, NVIDIA, CrowdStrike, Palo Alto Networks, cybersecurity, Linux Foundation, Hugging Face, AI security

NVIDIA, Microsoft, IBM, CrowdStrike, Palo Alto Networks, and 35+ companies have formed the Open Secure AI Alliance to build open, inspectable AI cybersecurity tools — founded in part after a Hugging Face breach where closed AI tools blocked defenders from analyzing 17,000 attacker actions.

Details

The Open Secure AI Alliance launched with 35+ founding members spanning cloud computing, cybersecurity, enterprise software, and AI research — anchored by NVIDIA and built on the Linux Foundation's Akrites initiative and OpenSSF community infrastructure. Members include Microsoft, IBM, Cisco, CrowdStrike, Palo Alto Networks, Cloudflare, Databricks, Hugging Face, Palantir, Red Hat, Salesforce, SAP, ServiceNow, Siemens, Snowflake, and others. The alliance's founding rationale draws on a concrete incident: during a Hugging Face security breach, closed AI tools refused to help with forensic analysis because they could not distinguish defenders from attackers. Hugging Face responded by running the open-weight GLM 5.2 model on its own infrastructure to analyze more than 17,000 suspicious actions and contain the intrusion — an outcome closed systems could not enable. The core argument: for cybersecurity, open AI models are essential because defenders must inspect, adapt, and run frontier AI on their own infrastructure, without relying on third-party access controls that may block them mid-incident. The alliance will build shared open tools for vulnerability remediation and disclosure, targeting a distributed defense ecosystem with no single point of failure. Whether this becomes an influential standard-setting body or a press-release coalition depends on tooling delivery. The membership is unusually strong — CrowdStrike and Palo Alto Networks rarely join industry alliances without concrete strategic intent.