Apiiro Joins Chainguard’s Athena Coalition and Integrates AutoFix

Apiiro joined the Chainguard-led Athena coalition, a group coordinating an orchestrated defense of open source software. The move centers on how vulnerabilities are processed and fixed across a software ecosystem, with Apiiro positioning its participation around faster remediation workflows.

Athena has processed more than 40,000 AI-discovered vulnerabilities and coordinated ecosystem-wide responses, according to the release. The announcement also references a need to address vulnerabilities quickly without disrupting business-critical applications, especially when AI models uncover chained vulnerabilities in open source and proprietary first-party software.

The collaboration describes how Apiiro and Chainguard integrate their platforms. Apiiro reflects Chainguard’s remediation status within its Risk Graph while evaluating findings against a customer’s software architecture, and it generates contextual code fixes for code only the organization can patch. The release says the Guardian Agent contributes newly discovered vulnerabilities to the broader community while alerting customers when coalition findings impact their software.

Apiiro’s integration with Chainguard went live, with a focus on removing CVEs that Chainguard artifacts have remediated from Apiiro scans to reduce false positives. The company also said open source maintainers can request free access to AutoFix, and it described AutoFix as a capability that generates contextual code fixes and validates them through automated testing before creating review-ready pull requests. “Frontier AI models are uncovering novel, chained vulnerabilities in both open source and proprietary first-party software at a pace we’ve never seen before. Discovery is no longer the biggest challenge for CISOs,” said Idan Plotnik, Co-Founder and CEO of Apiiro. “The challenge is fixing vulnerabilities quickly without disrupting business-critical applications. By joining Athena, we are bringing organizations the context they need to understand which vulnerabilities actually affect their software architecture, which pose a real risk to the business, and how to fix them automatically without breaking their software. AI alone does not secure software. Context does.”

Apiiro said it is integrating its platform with Chainguard and making AutoFix available free for open source maintainers.

Provided by Globe Newswire on behalf of Apiiro. Click to read original content. The original article was written by Decision Insights Editorial.