What happened
Aikido Security has released Altar-1, an open-weight security model pruned from the 753B parameter GLM-5.3 model. The model is optimized for deployment on private, air-gapped, or on-premises infrastructure, specifically to support autonomous pentesting tasks. According to the report, the model has been reduced to 328 GB, allowing it to fit within the memory constraints of a 4x NVIDIA H200 GPU node while maintaining space for a 128k-context KV cache.
Aikido Security developed Altar-1 by applying two compression steps to the 753B parameter GLM-5.3 mixture-of-experts (MoE) model. The pruning process reduced the number of experts from 256 to 168 while maintaining the routing logic that selects 8 experts per token.
The model is designed to power the company's 'Aikido Machine' autonomous pentesting appliance. It is currently available on Hugging Face and is compatible with vLLM, utilizing the Marlin MoE kernel for inference.
Aikido reports that Altar-1 retains 92% of the covered vulnerabilities from its internal 32-CVE benchmark compared to the parent model, with a 5.2-point decrease in recall. The vendor also claims the model successfully identified a critical-severity vulnerability during a client's production pentest.
Source details: marktechpost.com ↗
Why it matters
Altar-1 addresses a critical deployment gap for organizations with strict data-residency requirements, such as banks and operational technology (OT) operators, who cannot send sensitive source code or architecture documentation to cloud-based frontier models. By providing a model that can run locally, Aikido enables these entities to perform autonomous security analysis without exposing proprietary data to external networks. The model's pruning process specifically preserves expert parameters related to coding and , which are essential for security-focused workflows. However, the model's performance is limited to targeted CVE rediscovery within specific pipelines, and its efficacy in blind discovery or exploit validation remains unproven outside of the vendor's internal benchmarks.
The primary utility of Altar-1 is enabling security analysis in environments where data residency is a legal or operational mandate. By moving the model on-premises, organizations avoid the risks associated with transmitting sensitive internal architecture and source code to third-party cloud providers.
The model's architecture is specifically tuned to balance memory usage with the long-running context requirements of security agents. By pruning the MoE structure, Aikido aims to solve the 'deployment gap' where memory-intensive models often struggle to maintain sufficient KV cache space alongside model weights.
The reliance on vendor-provided benchmarks means that the model's real-world performance in diverse, non-standardized security environments is not yet independently verified. The narrow scope of the current benchmark—focused on CVE rediscovery—suggests that the model is currently a specialized tool rather than a general-purpose security researcher.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
In AI, what are a model's "parameters"?
What to watch next
Users should note that the model requires high-end hardware, specifically Hopper-architecture GPUs (H100 or H200). While the model fits on 4x H200 GPUs, a 4x H100 80GB node (320GB total) is insufficient to hold the 328GB of weights, potentially limiting accessibility for some enterprise environments. Additionally, while the model is open-weight, it is not OSI-approved open source and remains subject to the original GLM-5.3 license, which includes specific restrictions for large-scale commercial operators. Future developments include potential fine-tuning for security workflows and experimentation with lower-bit formats like EXL3 to increase the number of active experts.
Hardware requirements are a significant barrier to entry. The 328GB weight footprint necessitates a 4x H200 configuration, which may be cost-prohibitive or physically unavailable for many potential users.
The licensing terms for Altar-1 include a clause requiring a security review from Z.AI for any Model-as-a-Service operator generating over $10B in annual revenue, which may impact large-scale commercial adoption.
Aikido has signaled plans to explore lower-bit formats like EXL3. This is a critical area to watch, as it could allow for higher expert retention and potentially improved reasoning capabilities in future iterations of the model.