The Linux Foundation announced the formation of the Open Robust Compartmentalization Alliance (ORCA) on November 24, 2025, to enhance software security through compartmentalization techniques. This initiative unites universities, technology companies, and research institutions to create more resilient systems amid rising cyber threats. ORCA aims to limit the impact of software vulnerabilities before they escalate.
On November 24, 2025, in San Francisco, the Linux Foundation, a nonprofit organization promoting open source innovation, launched the Open Robust Compartmentalization Alliance (ORCA). The alliance focuses on improving the resiliency and efficiency of software systems by advancing practical approaches to software compartmentalization, which isolates components to contain faults and security vulnerabilities.
ORCA serves as a neutral platform for collaboration across academia, industry, and government, fostering knowledge sharing, best practices, and technology development. This effort addresses the growing sophistication of cyber attacks, including those driven by AI, where traditional patching methods fall short. As Mike Dolan, SVP of Legal and Strategic Programs at the Linux Foundation, stated: "As automated and AI-driven attacks continue to expand, software security can no longer rely solely on patching vulnerabilities after the fact. ORCA introduces a forward-looking model – one that breaks software into isolated, resilient parts designed to contain threats before they spread."
The initiative invites participation from chipmakers to cloud vendors and plans a community kickoff meeting in the coming weeks to discuss early use cases. Supporting voices from academia emphasize ORCA's potential. Justin Cappos, Professor at New York University Tandon School of Engineering, noted: "ORCA is a focal point for a combined effort across the full software and hardware stack to fight back by limiting the impact of a successful attack."
Xiaoyi Lu from the University of California, Merced, added: "ORCA bridges research and practice to strengthen the resilience of operating systems in the era of AI." Similar endorsements came from Alex Voulimeneas at Delft University of Technology, Hugo Lefeuvre at the University of British Columbia, and Glenn Ricart of US Ignite, highlighting compartmentalization's role in building trustworthy systems and preventing interactions among multi-vendor applications.
To join, visit https://orca-lf.org/.