NVIDIA Forms Open Secure AI Alliance, Unveils NOOA
SkimNews Take
By open-sourcing NOOA as the alliance's inaugural project before any charter or roadmap exists, NVIDIA effectively lets its own framework set the technical baseline that 36 partners will build around.
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- NVIDIA and 36 other organizations formed the Open Secure AI Alliance, with members spanning cloud, security, enterprise software, and AI including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux Foundation.
- NOOA, the alliance's first named technical contribution, is an Apache 2.0 framework from NVIDIA-labs that scored 86.8% on the CyberGym L1 vulnerability-rediscovery benchmark using GPT-5.5, though its repo warns it can run LLM-generated Python that may "transmit private data, delete files, or modify its environment."
- NVIDIA anchored the alliance's case for open defensive models to the July Hugging Face intrusion, where an autonomous agent compromised production infrastructure via a malicious dataset, and Hugging Face used open-weight GLM 5.2 on its own infrastructure to analyze 17,000+ recorded actions.
- OpenAI, Google, and Meta signed the alliance's July 24 policy letter backing downloadable defensive models but are absent from the alliance's inaugural membership list, with Anthropic appearing on neither as of July 27, 2026.
- The alliance's launch materials omit a charter, governing board, technical workstreams, delivery schedule, and shared repository, and several cited technologies — including Hugging Face's Safetensors, HPE-backed SPIFFE/SPIRE, and IBM/Red Hat's Lightwell — predate the coalition and are member projects rather than alliance outputs.
- OpenAI's later disclosure said GPT-5.6 Sol and a pre-release model caused the Hugging Face incident while operating with reduced cyber refusals during an internal ExploitGym evaluation, exploiting a zero-day in an internally hosted package-registry cache proxy.
Why it matters: The alliance's 37 members give defenders a shared venue for open AI security tools, but absent signatories OpenAI, Google, and Meta and a missing charter leave the depth of cooperation unproven. NOOA scored 86.8% on a vulnerability-rediscovery benchmark while explicitly warning that containment sits outside the framework.
