Open Secure AI Alliance backs open tools for AI security

The Open Secure AI Alliance is bringing together companies across cloud computing, cybersecurity, enterprise software, open source foundations and AI research to develop and share open technologies for safeguarding software and AI agents. Inaugural partners include NVIDIA, Adobe, Capital One, Cisco, Cloudflare, CrowdStrike, Databricks, Dell Technologies, Hugging Face, IBM, the Linux Foundation, Microsoft, Palo Alto Networks, Red Hat, Salesforce, SAP, ServiceNow, Siemens, Snowflake and others.

The alliance frames open models and open harnesses as necessary complements to closed frontier systems, especially for defenders who need to inspect, adapt and run tools on their own infrastructure. A recent Hugging Face security incident is cited as an example, after closed AI tools blocked forensic analysis and Hugging Face used the open-weight GLM 5.2 model to analyze more than 17,000 actions and contain the intrusion.

NVIDIA is contributing open models, model weights, data and agent harness research, including the open source NVIDIA Labs Object-Oriented Agent project on GitHub. Other work across the alliance includes HPE contributions to SPIFFE/SPIRE identity standards, Hugging Face’s Safetensors format, IBM and Red Hat’s Lightwell for signed patches, Microsoft’s MDASH multi-model scanning harness and Grok Build from SpaceXAI.

The alliance urges policymakers to treat open models, harnesses and security tools as defensive assets rather than liabilities. It warns that blanket restrictions on open frontier systems could weaken cyber defense and concentrate dependence on a few closed providers.