Chainguard Joins FINOS as Gold Member to Shape Secure Open Source for AI-Era Finance

New updates have been reported about Chainguard.

Chainguard has joined the Fintech Open Source Foundation (FINOS), part of the Linux Foundation, as a Gold Member, positioning the company at the center of efforts to standardize and secure open source software across global financial institutions. The move gives Chainguard strategic access to a consortium of major banks, fintechs, and technology firms seeking to harden their software supply chains as AI accelerates code development and vulnerability exposure.

Through FINOS, Chainguard plans to apply its software supply chain security and governance expertise to create production-ready open source projects and standards that financial firms can adopt at scale. CEO Dan Lorenc framed the initiative as critical to enabling AI-native development on trusted software foundations, especially as adversaries use AI to shorten attack timelines and automate exploitation.

For Chainguard, the membership is both a business development channel into highly regulated, compliance-driven buyers and a platform to influence how financial services define “secure by default” for open source and AI workloads. By helping firms secure the software underpinning trading platforms, digital banking, and AI infrastructure, Chainguard is positioned to expand demand for its hardened, production-grade open source builds and supply chain tooling.

The company’s FINOS role builds on an existing strategy of deep engagement with the open source ecosystem, including contributions to Kubernetes, Sigstore, SLSA, Tekton, and Knative, as well as maintenance support through its EmeritOSS program for mature but critical projects. Chainguard also recently launched DriftlessAF, an open source framework designed to reduce operational drift and improve consistency in modern infrastructure, which may find direct application in financial institutions standardizing their CI/CD and runtime environments.

For financial executives, Chainguard’s participation in FINOS signals a potential path to jointly developed, industry-wide patterns for software supply chain resilience that can satisfy both regulators and internal risk teams. As FINOS emphasizes measurable ROI from open source adoption, Chainguard’s tools and reference implementations are likely to be evaluated not only on security posture but also on their ability to lower integration cost, reduce incident frequency, and support AI-driven development at scale.

The strategic implication for Chainguard is increased visibility and influence in a sector that prizes vendor trust, auditability, and long-term support commitments. For the broader market, the partnership underscores the convergence of AI, open source, and cloud-native infrastructure as a systemic risk point in finance, and positions Chainguard as a key vendor helping to translate high-level security frameworks into enforceable, repeatable controls embedded in financial firms’ software delivery pipelines.