CoSAI — Coalition for Secure AI (Organization)

CoSAI (Coalition for Secure AI) is an OASIS Open-hosted industry consortium focused on collaborative AI security standards. As of Q1 2026, it has 40+ industry partners with 10 Premier Sponsors.

See CoSAI — Coalition for Secure AI for the framework page covering CoSAI’s publications and guidance.

Membership (Key)

Premier Sponsors (10): Amazon, Microsoft, IBM, Intel, NVIDIA, PayPal, Anthropic, OpenAI, Google, and Meta (joined February 3, 2026).

Governance

• OASIS Open hosts CoSAI’s standards process
• Workstreams are the primary production vehicle
• Workstream 4 — Secure Design Patterns for Agentic Systems (most active)
• A2A Protocol now under Linux Foundation governance (150+ supporting organizations)

Origin

CoSAI was founded in 2024 when Google donated its SAIF Risk Map and Risk Assessment to the consortium. This transition from a single-vendor framework (Google SAIF) to a multi-stakeholder collaborative is analogous to how OpenID Foundation or FIDO Alliance operate.

CSAI Foundation

The CSAI Foundation (March 23, 2026) is a new 501(c)(3) spun from CSA (separate from CoSAI) with six strategic programs including an AI Risk Observatory. This is a distinct entity from CoSAI.

Q1 2026 Activity

• MCP Security White Paper (January 27) — 40 threats across 12 categories
• Principles for Secure-by-Design Agentic Systems (February 9)
• Project CodeGuard donation by Cisco (February 9)
• Meta Premier Sponsor onboarding (February 3)