Cisco Launches Low-Cost AI Models for Source Code Security
Cisco releases Antares, low-cost AI models for source code vulnerability detection.
Cisco has launched Antares, a family of small language models (SLMs) designed to efficiently identify known vulnerabilities in source code. These open-weight models aim to provide a cost-effective solution for organizations, particularly those with budget constraints, offering lower false positives than general open-weight models and reduced cost compared to large closed-source LLMs, while also supporting data sovereignty requirements.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCisco's release of the Antares family of small language models highlights a growing challenge: many organizations, especially those with limited budgets, lack effective tools to identify vulnerabilities in their own source code before deployment. Undetected code-level vulnerabilities remain a primary attack vector, often exploited long after introduction because manual code review is costly and inconsistent. The push toward affordable, data-sovereign AI models reflects the reality that large enterprises using expensive closed-source LLMs have had an unfair advantage in proactive vulnerability detection. Making these capabilities broadly accessible reduces the window of exposure for under-resourced organizations. This matters because a vulnerability left undetected in source code can cascade into systemic breaches affecting customers, supply chains, and regulatory standing.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.