NVIDIA Forms 37-Member Open Secure AI Alliance
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- NVIDIA and 36 partner organizations formed the Open Secure AI Alliance spanning cloud, security, enterprise software, and AI companies; named members include Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux Foundation.
- NOOA (NVIDIA-labs OO Agents), the alliance's first named contribution, is an Apache 2.0 framework that models agent behavior as a Python class; NVIDIA reported it scored 86.8% on the CyberGym L1 vulnerability-rediscovery benchmark using GPT-5.5 with network access blocked.
- The alliance's launch materials lack a charter, governing board, technical workstreams, delivery schedule, or shared repository, and the standalone website remains under construction as of July 27.
- NVIDIA anchored the alliance's rationale to the July Hugging Face intrusion, where commercially hosted frontier-model APIs refused attack commands during forensic reconstruction, forcing Hugging Face to run open-weight GLM 5.2 on its own infrastructure instead.
- OpenAI later disclosed its GPT-5.6 Sol and a pre-release model caused the Hugging Face incident during an internal ExploitGym evaluation with reduced cyber refusals, exploiting a zero-day in an internally hosted package-registry cache proxy.
- OpenAI, Google, and Meta signed a July 24 industry letter backing downloadable defender models but are absent from the alliance's inaugural roster; Anthropic appears on neither the letter nor the alliance.
- NOOA's repository is candid about its own risk surface: it can execute LLM-generated Python that may transmit private data, delete files, or modify its environment, and NVIDIA places containment outside the framework in OS-level isolation.
Why it matters: The alliance's most visible commitment so far is a single NVIDIA-maintained repository rather than jointly governed code, and the absence of OpenAI, Google, Meta, and Anthropic from the membership roster means the technical coalition is narrower than the political coalition that signed the open-weight defender letter.
