The Linux Foundation announced Akrites, establishing a shared Security Incident Response Team (SIRT) for coordinated discovery, patching, and public disclosure of OSS security defects.
Akrites is supported by Anthropic, AWS, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone, and Zscaler.
Seed funding comes from Alpha-Omega. Akrites will act as maintainer of last resort for abandoned packages.
“When patches are released to the public, adversaries are able to utilize AI to rapidly reverse engineer the underlying vulnerabilities, develop exploits, and launch attacks. The success of our efforts, therefore, will be measured in patch deployment, not publication,” the Linux Foundation said.