The Linux Foundation, joined by Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone and Zscaler, announced Akrites on June 25, 2026 in San Francisco. Akrites is a coordinated effort to remediate and disclose vulnerabilities in critical open source software, establishing a shared Security Incident Response Team (SIRT) and a single, standardized Coordinated Vulnerability Disclosure (CVD) process built on confidentiality-first principles. Founding members commit engineering talent, security expertise and funding to harden shared open source software that banks, hospitals, power grids, telecoms, governments, and AI labs depend on. The initiative responds to the era of AI-assisted vulnerability discovery, noting that frontier AI models can scan a major open source project and surface vulnerabilities in minutes, enabling bad actors who previously lacked technical expertise to mount sophisticated attacks. Founding signatories published a joint open letter titled “We All Depend on Open Source. We Will Defend It Together.”