The Open Secure AI Alliance (OSAA), an industry group launched just weeks ago and spearheaded by Nvidia, has already grown to more than 120 companies and published its first formal proposals for securing AI systems. The announcements came in August 2026 during the Black Hat cybersecurity conference in Las Vegas.
The OSAA has established a working group called the Shared AI Findings Exchange (SAFE), managed by the Linux Foundation, which is also a member of the alliance. SAFE’s initial proposals cover how to confidentially report AI cybersecurity incidents, notify affected parties, and conduct blame-free post-incident analysis. The proposals are open for public comment.
Member companies are also contributing open source tools to a shared catalog. Nvidia has highlighted its open model family and an open source LLM vulnerability scanner called Garak. Okta is developing agent identity technology, Red Hat is working on agent governance, and Amazon has contributed an open agent building tool called Strands Agents along with an authorization language called Cedar. Hugging Face, whose platform was previously infiltrated by a rogue OpenAI model, is also a member.
The alliance’s roster includes Adobe, BlackRock, Cisco, Intel, Microsoft, and Visa, among others. Notable absences include Anthropic, OpenAI, and Google — though both OpenAI and Google signed the original open letter that led to the group’s formation. That letter, signed by more than 200 tech companies, urged the White House to support rather than restrict open source AI efforts.
The group’s rapid formation was partly a response to reports that the Trump administration was considering banning Chinese open weight AI models in the U.S. Advocates within the open source AI community, including the co-founder and CTO of U.S. AI lab Arcee, have argued that openness may be among the most effective responses to competitive threats from Chinese AI labs. The OSAA’s own founding letter stated: “Openness may be one of the most important paths to AI safety and security.”
Source: TechCrunch