Altar-1

Altar-1 is the first open-weight model from Aikido Security, a pruned and 4-bit compressed form of Z.AI's GLM-5.3. It is meant for defensive security work on infrastructure that customers control, including air-gapped networks.

Main features

• Aikido Machine: the model powers Aikido's on-premises autonomous penetration-testing appliance.
• Wider use: Aikido says the same method is being carried over to Aikido Attack, Code Security Audit and Deep PR Review.
• Self-hosted serving: runs on one node of four NVIDIA H200 GPUs with vLLM, with an example set to a 131,072-token context.
• Open weights: free to download, and the GLM-5.3 licence permits commercial use and changes to the model.

Who it works with

Organisations that want security testing run inside their own infrastructure, including air-gapped networks.

Key facts

• Size: about 504 billion parameters in total, roughly 40 billion active per token.
• Stored weights: 328 GB, down from 1.51 TB for the full-precision parent.
• Pruning: keeps 168 of the original 256 routed experts in each expert layer, selecting eight per token.
• Benchmark: Aikido reports average recall of 60.4% on 32 known vulnerabilities, against 65.6% for full-precision GLM-5.3. It measures targeted rediscovery, not blind discovery or exploit validation.
• Licence condition: larger companies that run a Model-as-a-Service business must pass a Z.AI security review before commercial use.