The Linux Foundation has launched Akrites, an initiative intended to coordinate vulnerability discovery, remediation and disclosure for critical open-source software. The project arrives as AI-enabled vulnerability scanning changes the scale at which potential software flaws can be identified. Its central emphasis is not simply finding more issues, but getting fixes made upstream and patches deployed.
Akrites is organized around a multi-stakeholder coalition that includes technology vendors, financial institutions and open-source foundations. The official Akrites open letter describes the effort under the message, “We All Depend on Open Source. We Will Defend It Together.” The initiative was launched on June 25, 2026 and is coordinated by the Linux Foundation.
The publicly displayed letter includes organizations such as AWS, Anthropic, Chainguard, Cisco, Citi, Google, Microsoft and GitHub, JPMorganChase, IBM, NVIDIA and OpenAI, Endor Labs, Red Hat, the Rust Foundation, Sonatype, Vodafone and Zscaler. It also lists open-source groups including the Cloud Native Computing Foundation, OpenInfra Foundation, OpenJS Foundation, LF Energy, OpenSSF and the PyTorch Foundation.
What Akrites is trying to change
