Model & ML supply-chain security
HiddenLayer Scanner is a commercial AI model supply chain scanner from HiddenLayer. It is a commercial product offered as: SaaS, Self-hosted. Pricing model: not published.
Best for
Security teams that want a vendor-supported scanner for third-party and in-house models, wired into GitHub Actions
Consider instead if
HiddenLayer's model scanning sits in the AI Supply Chain Security module of the HiddenLayer platform, and its GitHub repositories call the product Model Scanner. The vendor says it analyzes models for malware, vulnerabilities, backdoors and unknown components before they reach production. The module page lists model file inspection, model genealogy with licenses and an AI Bill of Materials. An official GitHub Action adds scans to CI, reading models from a repository, Hugging Face, Amazon S3 or Azure Blob, and it works with a SaaS or a self-hosted scanner. Jenkins and Azure DevOps integrations also exist. The scanner is closed source. The pages we opened list no model formats and no prices, so ask the vendor.
This summary is our own wording of the sourced facts on this page.
Each value links to the page that states it, with the date we checked it.
As documented by the vendor or project. The tag is our label from a controlled vocabulary.
Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.
| Layer | Role | How it applies | Based on |
|---|---|---|---|
| L3 Supply chain Model and supply chain | Primary | Check that models, datasets and AI components from outside are what they claim to be and do not run code or hide backdoors when loaded. | Follows its category, Model & ML supply-chain security |
The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.
| Risk | How it applies | Based on |
|---|---|---|
| LLM03 Supply Chain | Scans third-party and in-house models and lists their origin, licenses and components before deployment. | Analyzes models for malware, vulnerabilities, backdoors and unknown components before production; Inspects model architectures, layers, weights and artifacts for tampering or anomalies; Builds an AI Bill of Materials from model files, metadata and supporting components; Traces model origin and licenses as part of model genealogy |
| LLM04 Data and Model Poisoning | The vendor says it looks for backdoors and tampering in model files and weights. | Analyzes models for malware, vulnerabilities, backdoors and unknown components before production; Inspects model architectures, layers, weights and artifacts for tampering or anomalies |
More in Model & ML supply-chain security, ranked within the category by Coverage Score.
OpenAI (Promptfoo)
Scans model files for malicious code, backdoor indicators and unsafe operations without loading them.
Best for: Teams that want a free scanner covering many model and archive formats, with SARIF output for code scanning in CI
Reviewed
Palo Alto Networks (Protect AI)
Scans saved ML model files for unsafe serialized code before you load them, from a CLI or Python.
Best for: ML and platform teams that want a free scanner to check downloaded or internally produced model files before loading or deploying them
Reviewed
Signs machine learning model files and verifies them later so tampering can be detected.
Best for: Teams that publish or consume models and want a free way to sign model files and check signatures before loading them
Reviewed
No. The scanner is closed source; HiddenLayer publishes Apache-2.0 SDKs and CI integrations that call it, such as a GitHub Action, a Jenkins plugin, an Azure DevOps task and a Databricks integration.
An official GitHub Action uploads models to the Model Scanner, either SaaS or self-hosted, and can fail the pipeline when a model is flagged. A Jenkins plugin and an Azure DevOps task cover other CI systems.
The vendor pages we opened list no formats, so confirm supported formats with HiddenLayer before you buy.
HiddenLayer Scanner is closed source (proprietary).
Source Source, checked October 21, 2026: github.com (opens in a new tab) Checked
HiddenLayer Scanner is offered as: SaaS, Self-hosted.
Source Source, checked October 21, 2026: github.com (opens in a new tab) Checked
Pricing model for HiddenLayer Scanner: Not published in the sources we checked.
Source Source, checked October 21, 2026: hiddenlayer.com (opens in a new tab) Checked
Status of HiddenLayer Scanner: Active.
Source Source, checked October 21, 2026: hiddenlayer.com (opens in a new tab) Checked
We have no commercial relationship with HiddenLayer.