Apiiro expands open source security with Chainguard Athena coalition. August 6, 2026 Apiiro has joined Chainguard's Athena coalition and is offering its AI-powered AutoFix tool free to open-source maintainers, helping accelerate vulnerability remediation as AI-driven threats continue to grow. Apiiro has joined Chainguard's Athena coalition and is making its AI-powered AutoFix tool available free of charge to open-source maintainers, reinforcing community efforts to defend open-source software against AI-powered attacks. As part of the collaboration, Apiiro and Chainguard are integrating their platforms to automate vulnerability prioritisation and remediation. The move enables open-source maintainers to generate contextual code fixes faster while helping organisations identify and address vulnerabilities that pose the greatest business risk. Athena has already processed more than 40,000 AI-discovered vulnerabilities, coordinating ecosystem-wide responses to emerging AI-driven threats. Apiiro joins coalition members including J.P. Morgan, Morgan Stanley, Cisco, Cloudflare, Akamai and Qualys in expanding the industry's collaborative defence of open-source software. Apiiro's Guardian Agent contributes newly discovered vulnerabilities to the Athena community while notifying customers when coalition findings affect their software. It prioritises vulnerabilities based on software architecture, runtime exposure and business impact, then uses AutoFix to generate contextual fixes, validate them through automated testing and create review-ready pull requests. Apiiro also integrates Chainguard's remediation status into its Risk Graph, allowing organisations to focus on vulnerabilities relevant to their own software. "The challenge is fixing vulnerabilities quickly without disrupting business-critical applications. By joining Athena, we are bringing organizations the context they need to understand which vulnerabilities actually affect their software architecture, which pose a real risk to the business, and how to fix them automatically without breaking their software. AI alone does not secure software. Context does," said Idan Plotnik, Co-Founder and CEO of Apiiro. The integration is available immediately for joint Apiiro and Chainguard customers, while open-source maintainers can now request free access to AutoFix.

Chainguard joins AWS Security Hub Extended to strengthen open source Supply Chain security. August 5, 2026 Chainguard has launched the Chainguard Libraries service via AWS Security Hub Extended as a partner in the new Supply Chain category, thereby allowing AWS customers to bolster software supply chain security through the use of malware-free, secure-by-default replacement packages for any public open source dependencies. This will allow companies to avoid getting compromised open source packages into their development, CI/CD, and production environments in light of the rising threat posed by more and more sophisticated malware that utilizes artificial intelligence. Unlike most scanning tools, which only find out about threats after the malicious packages have been distributed, Chainguard rebuilds open source packages from trusted source code in an isolated environment called the Chainguard Factory. Supply Chain Management Through AWS Security Hub Extended, customers can purchase Chainguard Libraries using existing AWS contracts, consolidate billing, access centralized security findings using the Open Cybersecurity Schema Framework (OCSF), and receive unified Level 1 support for Enterprise Support plans. The integration is designed to reduce procurement complexity while improving visibility and protection against software supply chain threats without disrupting developer productivity. "Open source is the foundation the world's software is built on. When that ecosystem gets compromised, the blast radius is enormous," said Patrick Donahue, Senior Vice President of Product, Chainguard. "AWS adding us as a partner for supply chain security with the Extended plan is a real signal that the industry is treating this problem with the seriousness it deserves. Chainguard delivers that protection to customers with open source that's trustworthy by default."