Definition
Akrites is a linux-foundation industry initiative (launched June 25, 2026) coordinating remediation and disclosure of vulnerabilities in critical open source software as AI accelerates both offensive and defensive discovery.
Key Components
- Shared SIRT: Single Security Incident Response Team reducing duplicate reports to maintainers
- Standardized CVD: Coordinated Vulnerability Disclosure using CVE, TLP, CWE, CVSS, EPSS, SSVC, VEX
- Maintainer of last resort: Ships fixes when projects are abandoned
- Success metric: Patch deployment speed, not publication alone — AI enables rapid post-disclosure exploit development
Founding Members
amazon, anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, google, ibm, jpmorgan, microsoft, github, nvidia, openai, RapidFort, red-hat, Rust Foundation, Sonatype, Vodafone, Zscaler
Funded initially by Alpha-Omega directed fund.