Open Source

OpenStack Hibiscus: Trusted AI Infrastructure With Confidential Compute

OpenStack Hibiscus: Trusted AI Infrastructure With Confidential Compute

AI, Application Development, Infrastructure, Machine Learning, Open Source /

OpenStack 2026.2 Hibiscus delivers confidential computing, GPU resource management, and efficiency improvements aimed squarely at AI and HPC workloads. For organizations in regulated or air-gapped environments, it makes a credible case for self-managed infrastructure as a compliance and trust strategy. ECI Research data shows why that case resonates with government and enterprise buyers.

OpenStack Hibiscus: Trusted AI Infrastructure With Confidential Compute Read More »

AI Is Breaking Open Source Trust — And Provenance Is the Fix

AI Is Breaking Open Source Trust — And Provenance Is the Fix

AI, Application Development, Open Source /

AI-accelerated development is flooding open source maintainers with unreviewed pull requests while cryptographic signing and SBOM adoption remain dangerously low. Timothy Lewis of tea.inc. argues that provenance and identity are the missing foundations of enterprise software supply chain security. ECI Research data shows that AI-generated package risk is now the top open-source security concern for 2026.

AI Is Breaking Open Source Trust — And Provenance Is the Fix Read More »

Kiro Crew Open Source: AWS Bets on Multi-Agent AI Dev Tools

Kiro Crew Open Source: AWS Bets on Multi-Agent AI Dev Tools

AI, Application Development, Machine Learning, Open Source /

Amazon has open sourced Kiro Crew, a multi-agent AI orchestration platform built to coordinate autonomous agents across sessions, repos, and tools. With 39,000 internal users before launch and a security-first design, it’s a credible entry into a crowded but still-fragmented market. ECI Research breaks down what it means for ITDMs and developers evaluating agentic tooling in 2026.

Kiro Crew Open Source: AWS Bets on Multi-Agent AI Dev Tools Read More »

Codenotary Uses Claude AI to Secure immudb Development

Codenotary Uses Claude AI to Secure immudb Development

AI, Application Development, DevOps, DevSecOps, Open Source, Programming, Software Development /

Codenotary has been accepted into Anthropic’s Claude for OSS program, deploying AI assistance to accelerate development of immudb, its open source immutable database. The company is using Claude to detect subtle bugs, analyze concurrency issues, and generate regression tests, while maintaining mandatory human review of all code changes. The move positions Codenotary to ship faster at a moment when enterprise demand for software supply chain security infrastructure is near peak.

Codenotary Uses Claude AI to Secure immudb Development Read More »

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Eclipse Foundation & OWASP Unite for CRA Open Source Security

Application Development, Compliance, Open Source, Security /

The Eclipse Foundation and OWASP have signed an MOU to strengthen open source security and support EU Cyber Resilience Act compliance. With mandatory reporting obligations taking effect September 11, 2026, the partnership targets SBOM adoption, supply chain security, and maintainer readiness. ECI Research data shows supply chain security is a top-12-month investment priority for nearly half of enterprise respondents.

Eclipse Foundation & OWASP Unite for CRA Open Source Security Read More »

Traefik Distro Zero: Memory-Safe, FIPS 140-3 Gateway Security

Traefik Distro Zero: Memory-Safe, FIPS 140-3 Gateway Security

AI, Application Development, Cloud-Native, DevOps, Kubernetes, Open Source, Software Development /

Traefik Labs has introduced Distro Zero, a hardened container image that ships a single static Go binary with FIPS 140-3 validated cryptography and no C library substrate. The announcement targets regulated enterprises facing the FIPS 140-2 sunset deadline and EU Cyber Resilience Act reporting obligations. Advanced gateway capabilities are unlocked by license on the same binary, eliminating re-validation when requirements grow.

Traefik Distro Zero: Memory-Safe, FIPS 140-3 Gateway Security Read More »

Open Secure AI Alliance: NVIDIA's Bet on Open Cybersecurity

Open Secure AI Alliance: NVIDIA’s Bet on Open Cybersecurity

AI, Application Development, Cyber Security, Machine Learning, Open Source /

NVIDIA and more than 40 industry partners have formed the Open Secure AI Alliance, arguing that open AI models and harnesses are essential defensive assets for cybersecurity. The alliance is contributing open agent frameworks, supply chain integrity tools, and zero-trust identity infrastructure to a shared defense stack. ECI Research data shows enterprises already operate in blended open/closed security tooling models, making the alliance’s approach practically relevant today.

Open Secure AI Alliance: NVIDIA’s Bet on Open Cybersecurity Read More »

Kata Containers 4.0: Open Source AI Agent Sandboxing Grows Up

Kata Containers 4.0: Open Source AI Agent Sandboxing Grows Up

Application Development, Cloud-Native, Open Source, Security /

Kata Containers 4.0 promotes its Rust-based runtime to default, replacing Go, and positions the project as the open source standard for isolating AI agents in Kubernetes. The release addresses real production risk as nearly two-thirds of organizations report elevated security exposure from AI tooling. Confidential Containers integration broadens the appeal to regulated industries facing data sovereignty requirements.

Kata Containers 4.0: Open Source AI Agent Sandboxing Grows Up Read More »

Codenotary Free AI-Powered Linux Security for AlmaLinux

Codenotary Free AI-Powered Linux Security for AlmaLinux

Application Development, Open Source, Security /

Codenotary has launched a permanently free tier of its AI-powered security platform for AlmaLinux, covering up to 25 machines with full feature access. The offer includes SBOM management, CIS compliance, patch management, and AI agent monitoring. It’s a freemium land-and-expand play targeting lean ops teams with growing AI exposure.

Codenotary Free AI-Powered Linux Security for AlmaLinux Read More »