Ex-CISA Secure by Design leads launch Software Safety Institute, a public-interest nonprofit
WeldPond · x · 2026-11-10
The Software Safety Institute (SSI) launched November 9, 2026, founded by Lauren Zabierek and Bob Lord, who started and co-led CISA's Secure by Design initiative. Retweeter WeldPond notes L0pht warned the Senate in 1998 that software makers weren't building in security — 28 years later users still pay for preventable flaws.
SSI is a public-interest nonprofit arguing that:
- Software insecurity is ultimately human safety: vulnerabilities can mean cancelled surgeries, disrupted schools, shuttered small businesses, permanently leaked personal data
- Accountability should sit with software makers, not just the operators who patch, monitor and train
- Its three missions: measure the state of software safety, shift market forces and policy incentives, shape public norms
It has already responded to NIST's RFI on modernizing the NVD, arguing the core problem is accountability for CVE record quality at the source, not processing capacity.
More from Safety
- Claude's hidden reasoning_effort tag exposed — and it secretly reads hidden messages — josh_bickett · 2026-11-10
- Short seller flagged Nvidia CEO's China ties six months before the spy scandal broke — TechCrunch AI · 2026-11-10
- MIRI launches 'Do Not Accept' campaign challenging AI companies' decisions for humanity — DavidSKrueger · 2026-11-10
- Cisco enlists Claude Mythos to red-team enterprise AI agents — shashib · 2026-11-10
- Anthropic: Claude Fable/Mythos 5.2 voice suspicion they're being evaluated, muddying safety tests — ChrisGPT · 2026-11-10
- AI safety researcher: window to pace AI may be shorter than expected, urges government action — austinc3301 · 2026-11-10