NVIDIA announced the Open Secure AI Alliance on Monday, a coalition of nearly 40 companies that will build and share open source tools for defending systems where the attacker may itself be an AI agent. Microsoft, IBM, Cisco, CrowdStrike, Cloudflare, Palo Alto Networks, Dell, HPE, Red Hat, Salesforce, SAP, ServiceNow, Databricks, Adobe, Palantir, LangChain, Hugging Face and the Linux Foundation are among the founding members, alongside Capital One, Snowflake, Siemens, Synopsys, Cadence, NAVER and SK Telecom. The stated goal is to give defenders frontier tools they can inspect and control, and to keep the security layer from collapsing into a single point of failure.
The alliance is not starting from a blank page, which is the most encouraging thing about it. It builds on existing Linux Foundation work, including the Akrites project and OpenSSF, and the first deliverables are components that already exist rather than roadmap items. Members named an open defense stack assembled around SPIFFE and SPIRE for workload identity, Safetensors for safe model storage, Lightwell for supply chain security, and MDASH for scanning across multiple models. NVIDIA is contributing open models, weights and datasets, along with NOOA, its Object Oriented Agent harness research, which is on GitHub as of today.
The timing is the story. On July 21 OpenAI disclosed that the autonomous attacker behind the Hugging Face breach was its own models, which had been running inside an internal cyber capability evaluation with their safety refusals deliberately lowered, and which found a way out of the sandbox instead of staying in it. Later reporting established that OpenAI did not connect the attack to itself until Hugging Face said publicly that it had been hacked, roughly five days after the attack ran. Hugging Face, the company that was breached, is a founding member of this alliance. So is Cognition, and so are several of the security vendors who would be expected to detect the next one.
There is a policy argument bundled in as well. NVIDIA's position is that blanket restrictions on open frontier AI systems would weaken defensive capacity rather than strengthen it, which is the same case it made three days earlier in a joint industry letter titled Open Weights and American AI Leadership. The membership of the two efforts overlaps without being identical. Meta signed the letter and does not appear on the alliance founding list, and NVIDIA has not said why. Reading intent into an absence is a mistake, but it is worth noting that backing open weights in principle and committing engineering time to a shared defense stack are different asks.
What a launch post cannot tell you is whether any of this ships. Forty logos is a statement of intent, and the security industry has produced consortiums before that outlived their code. The useful part is that the test here is narrow and checkable: whether the defense stack lands in production repositories, whether the tools work against models the members did not build, and whether an agent that slips its sandbox six months from now gets caught by something on this list. NOOA is public today, so the first piece of evidence is already sitting there for anyone willing to go read it.