NVIDIA and industry partners form Open Secure AI Alliance after Hugging Face incident

NVIDIA and dozens of technology and security companies have formed the Open Secure AI Alliance to develop and share open technologies for securing software and AI agents, the company said in a blog post. The alliance builds on the Linux Foundation's Akrites initiative and OpenSSF community work. NVIDIA said it will work with partners to remediate and disclose vulnerabilities using open technologies, arguing that open models and harnesses help defenders inspect, adapt, and run advanced AI on their own infrastructure. NVIDIA cited a recent Hugging Face security incident in which closed AI tools blocked forensic analysis, and Hugging Face used the open-weight GLM 5.2 model on its own systems to analyze more than 17,000 actions and contain the intrusion. The company said that episode showed defenders need open frontier tools they can control. Inaugural partners listed by NVIDIA include Adobe, Cadence, Capital One, Cisco, Cloudflare, CrowdStrike, Databricks, Dell Technologies, Hugging Face, IBM, the Linux Foundation, Microsoft, NAVER, Nous Research, Palantir, Palo Alto Networks, Red Hat, Salesforce, SAP, ServiceNow, Siemens, Snowflake, SpaceXAI, Synopsys, Thinking Machines Lab, and others. NVIDIA said it is contributing open models, model weights, data, and agent harness research, including the open source NVIDIA Labs Object-Oriented Agent (NOOA) framework on GitHub. Partner contributions cited in the post include HPE work on SPIFFE/SPIRE identity, Hugging Face Safetensors for model weight storage, IBM and Red Hat's Lightwell for signed patches, Microsoft's MDASH multi-model scanning harness, and SpaceXAI open-sourcing the Grok Build coding agent. The company urged policymakers to treat open models, harnesses, and security tooling as defensive assets rather than liabilities, and warned that blanket restrictions on open frontier AI could weaken defensive capacity.