Quick answer: Antares 350M is an open-weight 350M-active-parameter security small language model by Cisco Foundation AI, purpose-built for terminal-based vulnerability localization. Despite its compact size, it achieves a File F1 of 0.135 on VLoc Bench — outperforming Gemini 2.5 Flash, Gemma 4 31B, GPT-5 Mini, and Qwen3.5-122B — while running the full 500-task sweep in ~11 minutes on a single H100. Apache 2.0 licensed and free to download.
Where Antares 350M leads
Where it lags
Best for: CI/CD pipelines and resource-constrained security environments needing a lightweight, local vulnerability triage agent that keeps source code on-premises.
Antares 350M is the smallest model in Cisco Foundation AI's Antares family, a trio of open-weight security small language models (350M, 1B, 3B) trained for one narrow task: given a CWE identifier and a source repository, find the files most likely to contain the reported vulnerability. It operates as a terminal agent — issuing shell commands (grep, find, cat), reasoning about the output, and iteratively narrowing to a ranked file list — without any external vector database or retrieval system.
Built on IBM Granite 4.0 350M via a two-stage pipeline (SFT on cybersecurity reasoning and terminal-navigation data, then GRPO reinforcement learning over multi-turn agent trajectories), Antares 350M learned to mimic how a human investigator searches an unfamiliar codebase: follow naming conventions, inspect call paths, compare candidate files, and backtrack when a path is unproductive.
At 0.4B total parameters and a 32K context window, Antares 350M is the fastest and lowest-VRAM option in the family — completing the 500-task VLoc Bench sweep in approximately 11 minutes on one H100 with 16 parallel workers — making it practical for automated CI/CD triage gates and edge/on-premises security deployments.
| Field | Value |
|---|---|
| Organization | Cisco Foundation AI |
| Active parameters | 350 million (~0.4B total) |
| Architecture | Auto-regressive decoder-only transformer (IBM Granite 4.0 350M MoE hybrid backbone): 28 layers, hidden dim 1024, 16 attention heads, 4 KV heads (GQA), SwiGLU, RMSNorm, RoPE |
| Context window | 32,768 tokens |
| License | Apache 2.0 |
| Modality | Text |
| HuggingFace | fdtn-ai/antares-350m |
| Release date | 2026-07-21 |
| Knowledge cutoff | April 2025 |
| Training | SFT → GRPO (8× H100) |
| Input (per 1M tokens) | Output (per 1M tokens) | |
|---|---|---|
| Self-hosted | Open weights — hosting cost only | Open weights — hosting cost only |
Open-weight model under Apache 2.0. Access requires agreeing to share contact information with Cisco Foundation AI via the HuggingFace model page gating form. No per-token fees; running costs depend on your own infrastructure.
| Model | VLoc-Bench | License | Params |
|---|---|---|---|
| Antares 350M | 13.5% | Apache 2.0 | 350M |
| Antares 1B | 20.9% | Apache 2.0 | 1B |
Cisco's compact VLoc-Bench models. Antares 1B (20.9%) outperforms 350M (13.5%) on spatial reasoning.
Scores from Benchgen evaluations. Last updated 2026-07-24.
This model isn’t on any benchmark leaderboard yet.