Scan a model file
Checks a model for unsafe pickle code, bytes the format does not account for, and data hidden in the weights — the same checks as the Python tool, run in this tab.
lock
Your file never leaves this page.
The page's Content-Security-Policy sets connect-src 'none', so the browser blocks every network request. The file is read into memory and scanned here.
memory
Drop a .safetensors, .pt or .gguf file to scan it
Also reads .pth, .bin and .ckpt. The format is detected from the content, not the name.
difference
Compare against a base model (optional)
Add the claimed base model to diff the weights bit for bit (the S5 check).
check_circle
progress_activity
Reading and scanning in this tab
File name
read locally
Format
Size
Tensors
SHA-256
Findings
search
check_circle