For more information, review the Working Group Charter.
The Security and Privacy Working Group advances the Agentic AI Foundation's mission by establishing security and privacy as a shared discipline across the Agentic AI ecosystem. Producing open threat models, a shared taxonomy, and design patterns that providers, consumers, and peer working groups can adopt to share responsibility for trustworthy agentic AI.
- Chair: Alex Frazer @awfrazer - Runlayer
- Co-Chair: Junjie Bu @mindpower - Google
The Working Group Chairs were appointed by the Platinum and Gold members of the working group.
Current term for the Working Group Chairs is March 1, 2026 - January 31, 2027.
This working group runs two alternating meetings so contributors across time zones can take part. The sessions alternate weeks, the chair attends both to carry notes and action items between them, and attending either one is enough to stay current.
The primary meeting is biweekly on Tuesdays at 10:00AM PT (USA Pacific Time; Convert to local time zone).
Next meeting: October 27, 2026
| Timezone | Time |
|---|---|
| PT / US (PST / UTC-8) | 10:00 AM |
| ET / US (EST / UTC-5) | 1:00 PM |
| UTC | 6:00 PM |
| CET / Europe (UTC+1) | 7:00 PM |
| IST / Israel (UTC+2) | 8:00 PM |
| IST / India (UTC+5:30) | 11:30 PM |
| CST / China (UTC+8) | 2:00 AM +1 |
| JST / Japan (UTC+9) | 3:00 AM +1 |
| AEDT / Australia (UTC+11) | 5:00 AM +1 |
[Join the Primary Meeting](https://zoom-lfx.platform.linuxfoundation.org/meeting/91539659750?password=******
The APAC meeting is biweekly on Mondays at 9:00PM ET (USA Eastern Time; Convert to local time zone). It lands on the alternate week from the primary meeting and follows the same agenda, so contributors in Asia-Pacific time zones get a working-hours session.
Next meeting: October 19, 2026
| Timezone | Time |
|---|---|
| PT / US (PST / UTC-8) | 6:00 PM |
| ET / US (EST / UTC-5) | 9:00 PM |
| UTC | 2:00 AM +1 |
| CET / Europe (UTC+1) | 3:00 AM +1 |
| IST / Israel (UTC+2) | 4:00 AM +1 |
| IST / India (UTC+5:30) | 7:30 AM +1 |
| CST / China (UTC+8) | 10:00 AM +1 |
| JST / Japan (UTC+9) | 11:00 AM +1 |
| AEDT / Australia (UTC+11) | 1:00 PM +1 |
[Join the APAC Meeting](https://zoom-lfx.platform.linuxfoundation.org/meeting/95568865388?password=******
All meeting recordings and AI summaries can be found at app.lfx.dev. Create a Linux Foundation (LFX) account to see all meetings, AI summaries, recordings, etc. all in one place.
| Folder | Description |
|---|---|
charter/ |
Working group charter and governance documents |
deliverables/ |
Published deliverables produced by the working group |
meeting-notes/ |
Meeting notes, agendas, and summaries |
Join the public working group mailing list: wg-security-privacy@lists.aaif.io
Reach out on the public Working Group Discord channel. New to the AAIF Discord Server? Join here.
Need help? email: support@aaif.io.
The TC supports multiple technical working groups. Working Groups are open to the public and cross-functional participation is actively encouraged. View the full calendar of public meetings.
The current list of working groups are:
- Accuracy & Reliability
- Agentic Commerce
- Governance, Risk & Regulatory Alignment
- Identity & Trust
- Observability & Traceability
- Security & Privacy
- Workflows & Process Integration
- Taxonomy & Landscape (a Cross-Working Group Workstream)
Members of this working group participate as individuals in service of the Agentic AI Foundation's mission, not as representatives of their employers. We are committed to ensuring that every member has a fair and equal opportunity to contribute. We strive to balance speed, inclusiveness, and rigor in our work, and we keep the group focused on shared outcomes that advance the security and privacy of agentic AI for everyone.
Meetings of the Agentic AI Foundation (AAIF) involve participation by industry competitors, and it is the intention of the Project to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of and not participate in any activities that are prohibited under applicable U.S. state, federal or foreign antitrust and competition laws. Examples of types of actions that are prohibited at AAIF meetings and in connection with AAIF activities are described in the Linux Foundation Antitrust Policy. If you have questions about these matters, please contact your company counsel or Andrew Updegrove of the firm Gesmer Updegrove LLP, which provides legal counsel to the Linux Foundation.