NVIDIA and dozens of other technology and cybersecurity firms launched the Open Secure AI Alliance on July 27, 2026, pledging open AI models and defender tooling instead of relying only on closed systems.
Quick Summary – TLDR:
- NVIDIA and other firms formed the Open Secure AI Alliance, naming NVIDIA, Microsoft, Dell Technologies, HPE, Hugging Face, IBM, Red Hat, Cisco, CrowdStrike, Palo Alto Networks and the Linux Foundation among its inaugural partners.
- The group points to the Hugging Face security incident as proof defenders need open models: closed AI tools blocked essential forensic analysis during a live intrusion.
- Hugging Face then ran the open-weight GLM 5.2 model on its own infrastructure to analyze more than 17,000 actions and contain the intrusion.
- Members are contributing specific tools: NVIDIA’s NOOA agent-harness framework, HPE’s SPIFFE/SPIRE identity standards, Hugging Face’s Safetensors format, IBM and Red Hat’s Lightwell, and Microsoft’s MDASH scanning harness, each tackling a different piece of agent oversight.
- The alliance is asking regulators to treat open models, harnesses and security tooling as defensive assets, not liabilities, warning that blanket restrictions would weaken defenders already stretched thin.
What Happened?
The Open Secure AI Alliance, per NVIDIA’s announcement, builds on the Linux Foundation’s Akrites initiative and OpenSSF community work to remediate and disclose vulnerabilities using open technologies. The coalition spans cloud computing, cybersecurity, enterprise software, open source foundations and AI research, and its stated mission is to give defenders open, frontier tools they can inspect and control.
NVIDIA’s framing is not that open models replace closed ones. The group argues defenders need both frontier closed models and frontier open models, working together, so security teams can pick the right system for a given job.
AI security advances when the industry builds in the open, together.
— NVIDIA (@nvidia) July 27, 2026
We’re introducing the Open Secure AI Alliance with industry leaders to develop new techniques and tools to safeguard software and agents.
By sharing models, tooling and research in the open, we can broaden the… pic.twitter.com/gfhKfrgcbl
The Defensive Tooling Members Are Contributing
NVIDIA, HPE, Hugging Face, IBM, Red Hat and Microsoft are contributing named, shipping security components to the alliance rather than pledges of future support. Each contribution targets a different layer of the agent-security stack, from identity verification to model-weight integrity to supply-chain signing.
| Contributor | Contribution | Defensive Function |
|---|---|---|
| NVIDIA | NOOA (NVIDIA Labs Object-Oriented Agent) | Agent-harness research now on GitHub, for testing, tracing and auditing agent behavior |
| HPE | SPIFFE/SPIRE | Zero-trust identity standards to cryptographically verify agents and services |
| Hugging Face | Safetensors | A safe model-weight storage format offered to the PyTorch Foundation |
| IBM + Red Hat | Lightwell | Digitally signed patches across the open source supply chain |
| Microsoft | MDASH | Multi-model agentic scanning harness that hunts and proves exploitable bugs |
| SpaceXAI | Grok Build | Open-sourced terminal coding agent, with model weights to follow |
NVIDIA is contributing open models, model weights, data and new agent harness research to speed development of cybersecurity tools. Read together, the contributions cover identity, weight integrity, supply-chain signing and bug-hunting, layers a team would otherwise stitch together from separate vendors.
The Hugging Face Incident as a Case Study
NVIDIA points to the Hugging Face security incident as the alliance’s founding case study for why defenders need open, inspectable models. The recent Hugging Face security incident delivered a clear reminder: cyber defenders need open, frontier agentic systems for self-defense. When closed AI tools, unable to distinguish attackers from defenders, blocked essential forensic analysis, Hugging Face ran the open weight GLM 5.2 model on its own infrastructure to work the incident.
That is the alliance’s real pitch: a closed model’s own guardrails, tuned to refuse anything resembling an attack, refused to help during a real one. An open model the defender controls avoids that failure mode.
Implications for Security Teams
The alliance is calling on policymakers to recognize open models, harnesses and security tooling as defensive assets, not liabilities, and warns that blanket restrictions on open frontier AI systems would weaken defensive capacity and concentrate power in a few closed providers. That is a direct policy ask, not just an industry announcement.
Notably, OpenAI and Anthropic, along with other commercial AI firms like Meta and Google, are noticeably absent from the new alliance. That gap matters for defenders evaluating which vendors will actually open-source the tools they rely on versus keep them closed.
SQ Magazine’s Takeaway
NVIDIA’s Open Secure AI Alliance reads as a defender-tooling coalition more than a policy campaign. The named contributions, an identity framework, a weight safety format, signed patch infrastructure and an agentic bug hunting harness, are concrete enough for a security team to evaluate now, not just a pledge to collaborate later. The Hugging Face incident gives the pitch a real failure mode to point to: a closed system’s own guardrails getting in the way of the people trying to stop an attack.
What’s next: watch whether NOOA, Lightwell and MDASH ship production integrations enterprise teams can actually deploy, and watch how regulators respond to the alliance’s ask to treat open models as defensive assets rather than restrict them. Treat this as an early stage toolkit to pilot, not a finished platform, and weigh vendor lock-in against the transparency it promises before betting critical workflows on any single member’s stack.
