01 / 04 · Security for machine learning
Aegis-
Tensor
A model file is a program you didn’t write.
Aegis reads safetensors, GGUF, PyTorch pickles, ONNX and Keras files without ever loading them, and gives one verdict with a next step. Then it disarms the weights anyway, because anyone who reads the public rules can tune a payload to slip under them.
- Python
- safetensors
- GGUF
- ONNX
- pickle VM