“Everybody with a $20 account is now a researcher”: How Akrites is tackling the flood of AI bug reports
The New Stack Paul Sawers
Akrites, an initiative launched by the Linux Foundation, is building a shared security incident response team to validate and deduplicate AI-generated vulnerability reports before sending them to upstream open source maintainers. Reviewing a single security pull request can take up to 8 hours for an engineer, and Akrites says AI reports are often verbose, inaccurate, and missing the data needed for reliable patches. The effort adds AI-driven triage plus up to 10 seconded engineers per member to turn noisy findings into concise artifacts like test cases and proof-of-concept before maintainers act.
Why it matters
AI is making it easier than ever to find potential security vulnerabilities in open source software. But finding something that The post “Everybody with a $20 account is now a researcher”: How Akrites is tackling the flood of AI bug reports appeared first on The New Stack.
