Owning your intelligence: SUSE joins the Open Secure AI Alliance

Owning your intelligence: SUSE joins the Open Secure AI Alliance Key Takeaways: - Relying exclusively on third-party API endpoints introduces unpredictable costs, context leakage and access risks. - True digital sovereignty requires an inspectable open source stack across silicon, runtimes and AI frameworks. - Open weight models now deliver near-frontier capability required for enterprise-grade defense and local forensics. SUSE is joining NVIDIA alongside other industry leaders in the Open Secure AI Alliance to advance open, sovereign private enterprise AI. In the rush to deploy artificial intelligence, enterprise leaders are confronting an uncomfortable reality: convenience has come at the expense of control. Relying exclusively on third-party API endpoints exposes organizations to rising costs. It also risks context leakage and sudden access restrictions. Enterprise leaders are realising that renting their core intelligence is a fragile long-term strategy. The strategic mandate is clear: you need to own your intelligence, not rent it. However, owning your intelligence requires far more than just downloading an open-weight model. It demands an entire technology stack, from silicon up through the hardened runtime to the AI framework, that is transparent, inspectable, and secure by design. No single company can deliver true operational resilience in a proprietary silo, nor should enterprises trust a ‘sovereign’ solution trapped inside a closed architecture. The recent security incident involving Hugging Face starkly illustrated the urgency of this shift. As increasingly autonomous AI systems interact with enterprise infrastructure, security teams are discovering that proprietary endpoints create dangerous blind spots. When incident responders needed to perform rapid local forensics and contain the breach, closed commercial tools failed to provide visibility. Defenders turned to open-weight models deployed on their local infrastructure, not as a compromise, but because open weights now deliver the near-frontier capability required to analyse and counteract complex, real-time threats. This incident proved a vital truth: open-weight models have reached the maturity and power needed for broad, mass-production enterprise usage. This watershed moment proved that effective AI defence cannot be outsourced to third-party endpoints where you lack the authority and tools to direct the response, nor can it rely on a single vendor’s closed cloud. Achieving true “defensive velocity” and long-term digital sovereignty requires inspectable tools, open-weight models, and ecosystem-wide open standards. To help build that open, resilient foundation, SUSE is proud to join NVIDIA and our industry peers in the Open Secure AI Alliance: “At SUSE, we stand by two critical truths. First, open source has a vital part to play in driving the rapid innovation and near-frontier capabilities that make Private Enterprise AI fully viable. Second, an AI stack and its security posture are more than just a model; they require enterprise safeguards, zero trust security, and a hardened underlying runtime. When speed, privacy, and local execution matter, having the power to run and observe advanced models safely within your control eliminates single points of failure and guarantees true business continuity. As a member of the Open Secure AI Alliance, we believe that an open, flexible architecture—giving organizations the freedom to consume both open and closed models—is the foundation for enterprise operational resilience. For organizations globally, especially those in Europe balancing strict data governance with rapid AI adoption, open, sovereign infrastructure is not just an alternative; it is the strategic standard.” -Dr Thomas Di Giacomo, SUSE Chief Product and Technology Officer Defining Private Enterprise AI For AI to deliver permanent business and operational resiliency, it must be built on the foundation of Private Enterprise AI. To be clear, “private” does not mean restricting workloads to a legacy on-premises data centre. It means private to your organization. Whether deployed in a core data center, at the edge, in a specialized NeoCloud, or across public cloud infrastructure, Private Enterprise AI guarantees complete ownership of your technology stack, domain workflows, and proprietary intellectual property. Relying exclusively on third-party APIs turns AI adoption into a compounding financial burden, where costs scale unpredictably with usage. Transitioning to Private Enterprise AI allows organizations to shift toward a controllable, CAPEX-based model while retaining the flexibility to consume public cloud OPEX resources on their own terms. It guarantees choice rather than forced lock-in and dependence. At the same time, recent global shifts demonstrate how quickly access to frontier models can be altered by changing export controls or vendor access restrictions. Having direct control over your infrastructure ensures operational capabilities are never held hostage to external decisions. Crucially, Private Enterprise AI provides the operational framework to support true choice, allowing organizations to dynamically balance performance, cost, and privacy across their model portfolio. The rapid advancement of open-weight models, such as Google DeepMind’s Gemma, Mistral Large, Z.ai GLM, and Kimi K3, means near-frontier capabilities can now be hosted safely in-house as a sovereign baseline. Whether an organization chooses to leverage proprietary APIs for niche tasks or deploy open-weight models locally, Private Enterprise AI ensures you have the underlying architecture to manage that hybrid stack, insulate against sudden access restrictions, and always retain a resilient alternative under your complete control. Why AI Security Requires Open Transparency When autonomous AI threats emerge, security teams simply cannot defend what they cannot inspect. When complex systems act unpredictably, closed commercial endpoints obscure the vital telemetry required for threat hunting, auditing, and incident response. Open-weight architectures and inspectable frameworks give enterprise defenders the transparency needed to audit workflows, run local forensics, and isolate threats in real time. Open innovation provides the foundation for defensive velocity, allowing the global ecosystem to identify software supply chain vulnerabilities and harden systems far faster than closed platforms can act alone. Through the Open Secure AI Alliance, SUSE is collaborating with NVIDIA and broader ecosystem partners to establish open security tooling and auditable standards across the entire AI landscape and lifecycle. Security Starts Below the Application Layer An AI model is only as secure and reliable as the environment hosting it. True operational resilience and alignment with evolving regulatory frameworks like the European AI Act, cannot be achieved solely at the application level. Traceability, data protection, and model lineage must be enforced continuously throughout the underlying technology runtime. This is where SUSE brings decades of experience in mission-critical infrastructure to the AI stack. SUSE AI Factory is our strategic product vision and delivery mechanism for Private Enterprise AI, providing the hardened, trusted Linux and Kubernetes runtime layer that turns raw open source innovation into a secure, enterprise-grade operating environment. Built on open source standards, SUSE AI Factory empowers organizations to truly own their intelligence through complete operational freedom. It enables teams to deploy and manage workloads across any deployment footprint using any model, software framework, or hardware architecture, all backed by built-in AI-aware observability and zero-trust security. Furthermore, through SUSE AI Factory with NVIDIA, we natively embed NVIDIA AI Enterprise into our secure platform runtime. This delivers a flagship, production-ready foundation for organizations leveraging NVIDIA’s ecosystem, ensuring seamless access to accelerated compute technologies while maintaining total architectural choice across every layer of the stack. Building a Resilient AI Future The strategic discussion surrounding artificial intelligence must move beyond model chasing to focus on the underlying infrastructure that powers it all. By grounding AI strategies in open standards, hardened runtimes, and Private Enterprise AI, organizations can innovate rapidly while maintaining complete sovereignty over their digital future. Trust, security, and velocity are not opposites; when built on open foundations, they reinforce each other. Ready to scale your Private Enterprise AI strategy? Explore how SUSE AI Factory helps you deploy secure, repeatable, and sovereign AI workloads across any footprint. Related Articles Jun 21st, 2025