NVIDIA joined more than 30 technology organizations on July 27, 2026 to launch the Open Secure AI Alliance, a coalition focused on building openly licensed tools, models, and techniques for defending software and AI agents. The group is positioning itself around a practical thesis: defenders should be able to inspect, adapt, and run frontier security tooling on their own infrastructure rather than depending on a handful of closed vendors. Founding partners span cloud, cybersecurity, enterprise software, open source foundations, and AI research labs, including Adobe, Capital One, Cisco, Cloudera, Cloudflare, CrowdStrike, Databricks, Dell Technologies, Hugging Face, IBM, Microsoft, Palantir, Palo Alto Networks, Red Hat, Salesforce, SAP, ServiceNow, Snowflake, Synopsys, and the Linux Foundation.
Why an open defense stack for agents
Software supply chains and AI agent workflows share a common weakness: they are easier to attack than to defend when the tooling itself is opaque. The alliance’s argument is that open source has already proven it can carry critical infrastructure, and security tooling deserves the same treatment. Open-weight models and open harnesses allow security teams to study the systems they rely on, run them inside their own environments, and apply controls locally without waiting on a vendor release cycle.
The coalition points to a recent Hugging Face incident as evidence. When closed AI tools were unable to distinguish attackers from defenders during forensic analysis and blocked investigation, Hugging Face deployed the open-weight GLM 5.2 model on its own infrastructure. The team analyzed more than 17,000 actions and contained the intrusion, an outcome the alliance attributes to the ability to self-host an inspectable model under pressure.
NVIDIA’s contributions and the NOOA framework
NVIDIA is contributing open models, model weights, datasets, and agent harness research. The centerpiece is the NVIDIA Labs Object-Oriented Agent framework, NOOA, now available on GitHub. NOOA is designed to give harnesses a cleaner integration path with models so that agent behavior can be tested, traced, audited, and governed. For teams building or evaluating agentic systems, NOOA is a concrete artifact to study, not just a statement of intent.
Building blocks other members are bringing
The alliance is assembling an open defense stack with several identifiable pieces:
- Identity and isolation: HPE contributes to SPIFFE and SPIRE, which define zero-trust identity standards that cryptographically verify AI agents and services.
- Safe model formats: Hugging Face has contributed Safetensors to the PyTorch Foundation, a format for storing model weights without remote code execution.
- Supply chain patches: IBM and Red Hat’s Lightwell adds digitally signed patches to existing supply chain security work.
- Agentic scanning harness: Microsoft’s MDASH orchestrates specialized AI agents to discover, debate, and prove exploitable bugs.
- Open coding agents: SpacexAI has open sourced the Grok Build terminal-based coding agent and plans to open source the weights of the Grok model line.
Risks, safeguards, and a policy ask
The alliance acknowledges that open models can be misused, including attempts to weaken safeguards or repurpose capabilities for attacks. Its position is that these risks are not unique to open systems and must be managed wherever advanced AI runs. The proposed countermeasure is openness paired with safeguards, clear rules against malicious use, rigorous evaluation, and rapid remediation, rather than restricting defenders’ access to frontier tooling.
On policy, the coalition is asking regulators to treat open models, harnesses, and security tools as defensive assets. It warns that blanket restrictions on open frontier AI would weaken defensive capacity and concentrate dependence in a few closed providers. Recommended public and private investment includes shared datasets, evaluation frameworks, attack simulators, and red-teaming tools.
What to check if you run or audit agentic systems
For practitioners responsible for AI agent deployments or audits, the alliance’s work surfaces a short checklist:
- Confirm the model serving your agents can be self-hosted or replaced with an open-weight equivalent when a vendor’s tooling blocks defensive workflows.
- Verify that model weight formats reject remote code execution paths, using Safetensors or equivalent.
- Trace agent identity through SPIFFE and SPIRE or a comparable zero-trust scheme so each action is cryptographically attributable.
- Inspect whether your agent harness produces auditable traces; frameworks like NOOA and MDASH are designed for that property.
- Track signed patch delivery for model and dependency updates, following the Lightwell pattern.
FAQ
What is the Open Secure AI Alliance?
The Open Secure AI Alliance is a coalition launched on July 27, 2026, that develops and shares open technologies, techniques, and tools to safeguard software and AI agents. NVIDIA and more than 30 founding partners from cloud, cybersecurity, enterprise software, open source foundations, and AI research are inaugural members.
Why are open models important for cybersecurity?
Open models and open harnesses let defenders study, adapt, and run advanced AI on their own infrastructure. This enables distributed, community-driven defense without a single point of failure and allows local controls that complement closed frontier models.
What has NVIDIA released for the alliance?
NVIDIA has contributed open models, model weights, data, and agent harness research, and has released the NVIDIA Labs Object-Oriented Agent framework as open source on GitHub to help harnesses integrate with models and make agent behavior easier to test, trace, audit, and govern.