Hitachi joined Akrites, a cross-industry project for assessing, fixing and disclosing vulnerabilities in critical open-source software. The company will take a board role and contribute more than 30 engineers.
An initial priority is Keycloak, software used to manage authentication and access. Work will cover prioritising vulnerabilities, developing patches and coordinating disclosure with maintainers.
Open-source components sit inside many systems used by energy companies, manufacturers and public services. A flaw can therefore affect multiple operators. Coordinating the response can give maintainers access to engineering resources and help users deploy fixes before vulnerability details become widely available.
