Linux Foundation Launches Akrites Open-Source Security Project

The Linux Foundation has officially announced the launch of Akrites, a coordinated industry initiative designed to defend critical open-source software against the rising threat of AI-assisted vulnerability discovery and exploitation.

As artificial intelligence tools have dramatically accelerated the speed at which software flaws can be found, open-source maintainers—many of whom are volunteers—have faced an unsustainable deluge of bug reports and potential exploits. Akrites aims to provide a unified, industry-backed framework for vulnerability response to protect the global software supply chain.

A Centralized Security Safety Net

A core component of the Akrites initiative is the establishment of a Shared Security Incident Response Team (SIRT). This centralized team will help manage and remediate vulnerabilities, utilizing a standardized Coordinated Vulnerability Disclosure (CVD) process built on confidentiality-first principles.

Furthermore, the program acts as a maintainer of last resort, ensuring that critical security fixes can still be delivered for vital software packages that may no longer be actively supported by their original authors.