Open-weight models are the new attack surface.
WARDEN reads any model from the Hugging Face Hub, renders its real transformer architecture in 3D, and runs a behavioral security profile — static byte scan, dynamic red-team probes, and a company-readiness verdict.
Try a model
3D weight map
Real architecture from config.json, rendered as an explorable transformer stack.
Merkle integrity
Mock tamper-evident tree. Hashes are synthetic — no shard is downloaded.
Static + dynamic
Illustrative serialization scan and red-team results. No inference is run.
Company verdict
A mock GO / CAUTION / NO-GO scored from the simulated signals above.
Whoever holds the verdict on every public model holds the choke point of the open-weight economy.
Architecture, license and registry stats are real. The security layer — static scans, red-team probes, and the trust verdict — is simulated for demo purposes. No weights are downloaded or hashed.