Compact Vulnerability Models

Cisco Releases Its Antares-1B And Antares-350M Models

Cisco introduced Antares-350M and Antares-1B, two open-weight AI models designed to locate files in software repositories that may be linked to known vulnerability categories. Published under the Apache 2.0 licence on Hugging Face, the models accept CWE identifiers and descriptions, then use terminal commands to investigate code while supporting local deployment.

Antares focuses on file-level candidate discovery rather than generating patches or identifying exact vulnerable lines. It can return human-readable, JSON and SARIF reports and supports deployment through Transformers, vLLM, Docker Model Runner and quantized runtimes. Cisco also published a 500-task Vulnerability Localization Benchmark and recommends running repository scans in isolated, read-only containers with logging and human oversight.

For security teams, the models provide a compact, privacy-focused way to prioritize code review after advisories or alerts. Their smaller sizes support lower-cost inference and CI/CD integration, although Cisco notes weaker performance on large repositories and vulnerabilities requiring broad multi-file context.

Open at source ↗