The Open Safe AI Alliance expands at Black Hat with SAFE pointers and open frameworks, providing IT leaders inspectable instruments, decrease token prices, and a transparent roadmap for safe enterprise AI.
Applied sciences scale a lot quicker when they’re open and interoperable. This has been true for networking, VoIP, cellular, and virtually each different know-how shift over the previous few a long time. The Open Safe AI Alliance is a major step towards making AI protection open, inspectable, and enterprise-ready, and it arrives at a second when IT groups are attempting to show pilot initiatives into manufacturing worth.
Why an open AI protection stack issues
Open supply has lengthy been the spine of recent infrastructure, spanning cloud and compute platforms, and cybersecurity is amongst its greatest beneficiaries. The Open Safe AI Alliance (OSAA) applies that very same mannequin to AI safety by committing to shared open fashions, agent harnesses, instruments, and information that defenders can examine, prolong, and run on their very own infrastructure.
The core argument behind OSAA is that if the subsequent era of cyberattacks is AI-powered, the subsequent era of cyber protection have to be too, that means defenders want programs they’ll really see into. In a current incident on Hugging Face, closed AI instruments had been blocked, stopping important forensic evaluation and forcing the workforce to depend on an open-weight GLM 5.2 mannequin operating by itself infrastructure to research greater than 17,000 actions and include the intrusion.
That episode sheds mild on a brand new reality for CISOs and safety operations leaders: when you can’t examine and adapt your AI defenses within the second of a breach, you’re blind.
Who’s within the alliance and why it’s totally different
OSAA brings collectively a broad roster spanning cloud, cybersecurity, enterprise software program, and open-source foundations, amongst others. For enterprises, this issues as a result of it indicators that the AI protection stack gained’t be a single-vendor vertical product however an ecosystem anchored in open requirements and elements.
A number of of the founding contributions spotlight how deep this stack can go:
- HPE is contributing to SPIFFE/SPIRE, advancing zero-trust id requirements that may cryptographically confirm AI brokers and providers earlier than they work together with enterprise assets.
- Hugging Face has launched Safetensors, a safer model-weight format that stops distant code execution and will increase transparency in how fashions are saved and loaded.
- IBM and Crimson Hat’s Lightwell extends safety throughout the open-source provide chain with digitally signed patches, serving to shut gaps within the software program layer that AI programs depend on.
- Microsoft’s MDASH is a multi-model, agentic scanning harness that makes use of specialised brokers to find, debate, and show the existence of exploitable bugs, slightly than counting on a single opaque scanner.
These elements type an rising “open protection stack” for AI brokers that spans id, isolation, secure mannequin codecs, multi-model scanning, and safe improvement workflows. For IT leaders, this issues as a result of it guarantees constant controls throughout a multi-vendor atmosphere, slightly than brittle level instruments that don’t interoperate.
Nvidia, Cisco and the function of agent harnesses
Nvidia is backing the alliance not solely with fashions and weights but additionally with open agent-harness analysis via its Nvidia Labs Object-Oriented Agent (NOOA) framework. NOOA begins with a key perception for practitioners: mannequin alternative is just half the equation; the harness, the structure across the mannequin, can account for double-digit swings in benchmark efficiency and enormous variations in token value, even when the underlying mannequin stays unchanged.
In NOOA, an agent is represented as a single Python class. Its strategies outline capabilities, fields outline state, docstrings function prompts, and kind annotations implement contracts. That design makes agent improvement feel and appear like conventional software program engineering: brokers may be diffed, code-reviewed, unit-tested, and traced with the identical instruments groups already use for different important programs.
For enterprises, this can be a delicate however necessary shift because it turns agentic AI from a “black field workflow graph” right into a testable, auditable code floor that safety and platform groups can govern.
NOOA identifies six harness capabilities that materially have an effect on mannequin efficiency:
- Typed enter and output, so calls have validated arguments and returns as a substitute of free textual content.
- Cross-by-reference semantics, the place the mannequin operates on stay Python objects and bounded previews as a substitute of serialized dumps pushed into the context window.
- Code-as-action, that means the mannequin writes Python that invokes strategies and management movement instantly.
- Programmable loop engineering, with orchestration loops expressed as bizarre Python that people and fashions can modify.
- Express object state, conserving sturdy typed state on the agent object as a substitute of solely in dialog historical past.
- Mannequin-callable harness APIs for context blocks and occasion historical past, letting the agent examine and handle its personal working set.
For IT professionals, harness engineering is necessary as a result of it improves effectivity. In SWE-bench, NOOA achieves parity or higher accuracy with roughly half the tokens of comparability harnesses, thanks largely to pass-by-reference and the flexibility to keep away from pricey context-compaction pipelines. For enterprises wrestling with LLM value curves, that mixture of upper accuracy and decrease consumption instantly accelerates time to worth.
Cisco’s presence within the alliance builds on its broader partnership with Nvidia throughout networking, information middle AI materials, and safe AI factories. Cisco has already dedicated to integrating applied sciences similar to Silicon One and specialised SuperNICs into AI networking platforms and is advancing safe AI infrastructure from core to edge via choices similar to Cisco Safe AI Manufacturing unit with Nvidia.
As these networking and safety layers intersect with open harnesses and fashions from OSAA, IT groups acquire a clearer path to end-to-end architectures through which compute, information, brokers, and community safety align with widespread, open ideas.
Black Hat Replace: The SAFE Tips and Increasing the Open Stack
Because the annual Black Hat USA convention kicks off, the Open Safe AI Alliance introduced a significant new ecosystem initiative.
The Linux Basis, in collaboration with alliance members, launched a Request for Feedback (RFC) on the Shared AI Findings Change (SAFE) pointers.
SAFE is designed to show agentic cybersecurity incidents and “close to misses” into shared safety throughout the enterprise. Moderately than conserving breach particulars locked behind non-disclosure agreements or confined to single-vendor ecosystems, SAFE offers a framework to:
- Confidentially gather and analyze AI safety incidents, agent misbehaviors, and near-miss operational occasions.
- Inform impacted events shortly whereas figuring out recurring management failures in actual time.
- Publish evidence-based working suggestions to decrease systemic threat for all defenders.
Alongside the SAFE framework, OSAA members are increasing the open software program layer. Nvidia, for example, launched Nvidia OpenShell, an open runtime that serves as an agent-level sandbox. OpenShell limits what an agent can see, contact, or execute, imposing specific safety and privateness boundaries so autonomous instruments can not entry programs or information past their designated scope.
Collectively, these Black Hat bulletins reinforce a key precept for enterprise safety groups: securing agentic AI requires collective risk intelligence and open runtime guardrails, not simply remoted mannequin scanners.
Accelerating enterprise time to worth for AI
For enterprise IT, the query is much less “does this alliance matter?” and extra “how does it change my roadmap?” There are a number of direct impacts on time to worth:
- Quicker, safer experimentation: Open fashions and harnesses which might be inspectable and self-hostable let groups run high-risk safety workloads, similar to incident response or vulnerability discovery, on their very own infrastructure with out ready for closed suppliers to assist area of interest use circumstances.
- Decreased integration friction: An open protection stack spanning id, format security, scanning, and safe improvement offers a reference structure for AI safety, shortening design cycles and avoiding bespoke integrations for every instrument.
- Higher ROI from current fashions: Methods similar to typed I/O, pass-by-reference, and structured reminiscence can enhance accuracy and cut back token utilization with the identical fashions, turning stalled pilots into manufacturing deployments that meet each efficiency and price range constraints.
- Stronger systemic resilience: Open, multi-vendor ecosystems cut back the chance of single factors of failure or coverage shocks that come up when a small set of closed suppliers controls important defensive capability.
In apply, this implies AI safety initiatives can shift from “hero-based” experiments to repeatable patterns. Groups can apply NOOA-style harness designs to their incident response brokers, code reviewers, or threat-hunting workflows, and combine these brokers with id, logging, and scanning layers aligned with OSAA contributions.
Steering for IT and safety leaders
For IT professionals planning or scaling AI initiatives, a number of concrete steps may also help them make the most of this:
- Deal with the alliance outputs as a reference structure. As OSAA elements mature, map them to your current stack: SPIFFE/SPIRE for agent id, Safetensors for mannequin storage, Lightwell for supply-chain integrity, MDASH-like approaches for multi-model scanning, and harness patterns like NOOA on your agent platforms.
- Make harness engineering a important self-discipline. Don’t body agent initiatives solely as “mannequin choice”; put money into harness design. That’s, use typed contracts, pass-by-reference, programmable loops, and specific states, and measure their impression on accuracy, latency, and token prices.
- Align safety and improvement practices round brokers as code. With NOOA, brokers are Python courses that may be code-reviewed, unit-tested, and traced like another important service. Lengthen CI/CD, safe coding, and observability practices to those harnesses slightly than treating them as one-off automation scripts.
- Advocate for open, inspectable defensive instruments in coverage and procurement. When evaluating AI safety merchandise or drafting inner insurance policies, emphasize assist for open fashions and harnesses which you can run and examine on-prem or in your trusted cloud environments.
- Begin with high-leverage safety use circumstances. Early initiatives may give attention to vulnerability discovery in your personal codebase, automated configuration evaluation, incident triage, or threat-hunting brokers explicitly designed to work inside NOOA-style harnesses and OSAA-aligned id and logging.
The Open Safe AI Alliance’s core thesis is that AI protection needn’t be opaque or centralized. With the best mixture of open fashions, rigorous harness engineering and shared defensive tooling, enterprises can construct AI programs that aren’t solely highly effective but additionally observable, testable and underneath their management.
For IT leaders underneath strain to ship AI outcomes with out compromising safety, that may be a future price embracing now.
Different Information: Google is tightening Chrome extension insurance policies to curb abuse by proscribing high-risk permissions, strengthening enterprise controls, and making it more durable for malicious add-ons to use browser entry.
