Overview
Vendors are shipping compact, often open-weight AI tools purpose-built for defenders — local vuln localization, secure coding skills, and gated dual-use releases — rather than only frontier API scanners.
Timeline
- 2026-07-21: cisco cisco-antares + vloc-bench (2026-07-23-cisco-antares-open-weight-vuln-localization)
- 2026-07: Capital One VulnHunter open-source (Axios context)
Key Players
- cisco
- hugging-face
- ibm (Granite backbone — secondary)
Analysis
Local SLMs address cost and data-residency. Vendor benchmarks require careful attribution. Gating downloads acknowledges dual-use risk.