Tech giants launch Akrites to fix open-source vulns before they're exploited

We All Depend on Open Source. We Will Defend It Together

AWS, Anthropic, Google, Microsoft, OpenAI, and over a dozen others launched Akrites, a coordinated effort to find and fix vulnerabilities in critical open-source software. AI now finds flaws in minutes that once took weeks, and maintainers can't keep up. Instead of flooding maintainers with duplicate reports, Akrites provides a single confidential channel for discovery, remediation, and disclosure. Patches stay private until deployed; if a critical package has no maintainer, Akrites steps in as maintainer of last resort. The post does not disclose specific budgets or headcount, but signatories commit engineering resources and funding.

Why it matters: A coalition of AWS, Anthropic, Google, Microsoft, OpenAI and others launched Akrites to funnel open-source vulnerability reports through a single confidential channel, sparing maintainers from duplicate noise. The lineup and timing are strong — AI has collapsed the attacker-de...