Open-weight models are the new attack surface.
WARDEN reads any model from the Hugging Face Hub, renders its real transformer architecture in 3D, and runs a behavioral security profile — static byte scan, dynamic red-team probes, and a company-readiness verdict.
Try a model
3D weight map
Real architecture from config.json, rendered as an explorable transformer stack.
Merkle integrity
Tamper-evident Merkle tree built from real shard byte-range downloads and SHA-256 hashes.
Static + dynamic
Real pickle/safetensor byte scan plus live red-team probes run against the model on GPU via Replicate.
Company verdict
GO / CAUTION / NO-GO scored from real static and behavioral analysis signals.
Whoever holds the verdict on every public model holds the choke point of the open-weight economy.
Architecture, license, and registry metadata pulled live from the HF Hub. Static byte scans run against real shard files. Behavioral probes execute against live model weights on GPU. Every verdict is derived from real signals.