Linux Foundation Launches Akrites to Defend Open-Source From AI Threats

The significance here is not another consortium logo wall, it is an admission that the economics of open-source security have inverted. For two decades the defender's advantage rested on how hard it was to find bugs in sprawling codebases. Frontier models have collapsed that friction, and the same capability that lets defenders audit code lets attackers weaponize it at scale. Practitioners who ship software on open-source dependencies inherit that risk directly, whether or not they run their own AI security tooling.

A coalition organized by the Linux Foundation launched Akrites, a joint effort to find, disclose, and remediate security flaws in open-source software. Founding members include Anthropic, AWS, Google, IBM, Microsoft, Nvidia, OpenAI, Cisco, Citi, JPMorgan Chase, Ericsson, Red Hat, and others. The group will stand up a shared security incident response team and a coordinated vulnerability disclosure process, backed by member funding, engineers, and security expertise. Seed funding comes from Alpha Omega, a directed fund under the Linux Foundation, and other organizations are being asked to contribute resources or engineering talent.

Christopher Robinson, CTO of the Open Source Security Foundation and chief security architect of the Linux Foundation, said upstream projects are being inundated with vulnerability reports of varying quality that far exceed volunteer developers' ability to keep up. That framing matters: the constraint is not detection, it is triage and remediation capacity. Varun Badhwar, CEO of Endor Labs, said more than 23,000 vulnerabilities surfaced in the month after one AI-assisted discovery program began, affecting roughly 1,000 open-source projects, with about 6,000 rated high severity or critical. He said no volunteer ecosystem was built to absorb that volume.

The membership list is the tell. Frontier labs whose models accelerated vulnerability discovery are now helping fund the cleanup, alongside banks and infrastructure vendors with the most to lose from a supply-chain incident. A shared incident response team is a meaningful commitment because it implies paid, accountable staff rather than best-effort volunteering. The open question is whether Akrites converts corporate funding into durable maintainer capacity, or whether it becomes a clearinghouse that routes AI-generated reports without expanding the human bandwidth to act on them.

• •Whether the coordinated disclosure process sets quality bars that filter low-signal, AI-generated reports before they reach maintainers.
• •How funding splits between tooling and actual maintainer compensation.
• •Whether more cloud providers, chipmakers, and downstream enterprises join, which would signal the model is working.