NVIDIA, 36 Firms Launch Open Secure AI Alliance, Open-Source NOOA Framework

NVIDIA has joined forces with 36 other technology organizations to form the Open Secure AI Alliance, a cross-industry consortium aimed at building open, auditable defenses for software and AI agent systems. The 37-member group brings together cloud providers, security vendors, enterprise software firms, and AI labs, including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux Foundation. According to launch materials, the alliance's scope spans the full agent stack: identity, permissions, isolation, guardrails, logging, model formats, multi-model scanning, and secure coding workflows, with the explicit pitch that defenders need AI models they can read, modify, and run on their own hardware rather than relying solely on closed vendor APIs.

The alliance's first named technical contribution is NOOA (NVIDIA-labs OO Agents), an Apache 2.0 research framework that treats agent behavior as inspectable Python code. An agent harness is represented as a Python class, where fields store state, methods expose capabilities, docstrings act as prompts, and type annotations define model contracts. Methods with an ellipsis body are completed at runtime by an LLM-driven loop, while ordinary Python remains deterministic. In internal testing, NVIDIA reported NOOA scored 86.8% on the CyberGym L1 vulnerability-rediscovery benchmark using GPT-5.5, with network access blocked and rule-based trajectory checks applied, performance relevant for any organization evaluating how exposed its own infrastructure may be when deploying agents, an exposure you can probe yourself with a quick port scanner.

The NOOA repository is unusually candid about its risks. Because the framework can execute LLM-generated Python, it warns that such code may transmit private data, delete files, or modify its host environment. Its AST checks and module deny-lists are explicitly labeled as defense-in-depth controls, not a containment boundary. NVIDIA places containment outside NOOA itself: agents that run generated code must be isolated at the OS level, behind a container, virtual machine, or its OpenShell sandbox. NOOA provides inspection and tracing; the sandbox is the actual perimeter, a separation defenders should verify with a SSL/TLS checker and an browser fingerprint test before granting any agent outbound access.

Notably, the launch is light on operational scaffolding. The materials contain no charter, governing board, technical workstreams, delivery schedule, or shared alliance repository, and the standalone website remains under construction. The Hacker News has requested comment from NVIDIA on governance, member commitments, and first planned deliverables. For now, the alliance is best understood as a coordination signal from major vendors, with NOOA as the only concrete artifact, and a reminder that open agent frameworks demand the same runtime hardening as any other piece of internet-facing software.