Technology leaders have formed the Open Secure AI Alliance to secure artificial intelligence systems using open source software. The coalition pairs major tech firms with open foundations to develop accessible security tools for AI agents. But the alliance must now convince regulators that open systems are defensive assets rather than public liabilities.
A recent security breach at Hugging Face highlighted the necessity of open tools. When closed AI models blocked investigators by failing to separate attackers from legitimate researchers, Hugging Face ran an open weight model called GLM 5.2 on its own servers. The tool successfully analyzed 17000 hostile actions to contain the intrusion. This incident proved that closed systems can lock out defenders when speed is most vital.
The security of an AI agent depends on more than just the underlying weights. It requires a complete defense stack covering identity, permissions, and logs. To build this stack, members of the alliance are releasing several projects. NVIDIA has put its new Object Oriented Agent framework on GitHub to make safety testing easier. Microsoft is contributing its MDASH multi model agent scanning harness, while SpaceXAI is open sourcing its Grok Build coding agent and promising to release model weights in the future.
Other partners are targeting lower level infrastructure to secure corporate networks. Hewlett Packard Enterprise supports zero trust standards to verify agent identities cryptographically. Hugging Face is sharing Safetensors with the PyTorch Foundation to guarantee that model weights cannot execute remote code. IBM and Red Hat are using digitally signed patches through their Lightwell project to protect the open software supply chain.
The alliance is also sending a message to government regulators. Blanket restrictions on open systems could concentrate power in the hands of a few proprietary providers while weakening public defense. The coalition argues that public safety is best served when researchers have the freedom to audit, test, and patch the software that keeps the internet running.
