Akrites: How the Linux Foundation Initiative Targets Open-Source Vulnerability Response

The Linux Foundation has launched Akrites , an initiative intended to coordinate vulnerability discovery, remediation and disclosure for critical open-source software. The project arrives as AI-enabled vulnerability scanning changes the scale at which potential software flaws can be identified. Its central emphasis is not simply finding more issues, but getting fixes made upstream and patches deployed. Akrites is organized around a multi-stakeholder coalition that includes technology vendors, financial institutions and open-source foundations. The official Akrites open letter describes the effort under the message, “We All Depend on Open Source. We Will Defend It Together.” The initiative was launched on June 25, 2026 and is coordinated by the Linux Foundation. The publicly displayed letter includes organizations such as AWS, Anthropic, Chainguard, Cisco, Citi, Google, Microsoft and GitHub, JPMorganChase, IBM, NVIDIA and OpenAI, Endor Labs, Red Hat, the Rust Foundation, Sonatype, Vodafone and Zscaler. It also lists open-source groups including the Cloud Native Computing Foundation, OpenInfra Foundation, OpenJS Foundation, LF Energy, OpenSSF and the PyTorch Foundation. What Akrites is trying to change Akrites is focused on a practical security lifecycle: identifying vulnerabilities in critical open-source projects, helping drive remediation and handling disclosure. That focus matters because discovering a possible vulnerability is only an early stage of risk reduction. A finding has limited value if maintainers cannot address it, if the correction is not adopted upstream, or if downstream users do not deploy the available patch. The initiative therefore places upstream fixes and patch deployment at the center of its stated success measures. This is a meaningful distinction from approaches that judge progress largely by the number of vulnerabilities found or reports generated. The coalition combines several types of participants: Cloud, software and security vendors ,