---
license: apache-2.0
base_model: georgehenney/Qwen3-8B-heretic
tags:
  - security
  - cybersecurity
  - pentest
  - vulnerability-assessment
  - CVSS
  - NIST
  - OWASP
  - red-team
  - bug-bounty
  - gguf
  - mlx
  - qwen3
  - heretic
  - lora
  - fine-tuned
language:
  - en
pipeline_tag: text-generation
---

# RavenX-Sec 8B v3.0 — Autonomous Security Intelligence Model (GGUF)

<p align="center">
<strong>Find → Classify → Fix → Verify → Report</strong><br>
<em>The most comprehensively trained open-source security model. 379K training examples from 15 datasets.</em>
</p>

**Built by [@DeadByDawn101](https://github.com/DeadByDawn101) (RavenX LLC)**

## What This Is

RavenX-Sec produces structured security assessments using the **RATH protocol** — citing specific CVEs, generating CVSS vectors, showing vulnerable code examples, providing exploit PoCs, and delivering actionable remediation.

## Quick Start

```bash
# Ollama
ollama run hf.co/deadbydawn101/RavenX-Sec-8B-GGUF:ravenx-sec-v3.0-Q8_0

# Or download any GGUF below for LM Studio / llama.cpp
```

## Available Models

### v3.0 (Latest — Recommended)
Trained on 379K examples from 15 security datasets (84% security content).

| Filename | Quant | Size | Use Case |
|----------|-------|------|----------|
| `ravenx-sec-v3.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB | Fast inference |
| `ravenx-sec-v3.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB | Balanced |
| `ravenx-sec-v3.0-Q8_0.gguf` | Q8_0 | 8.1 GB | High quality |
| `ravenx-sec-v3.0-f16.gguf` | F16 | 15.3 GB | Maximum quality |

### v2.0 (Previous)
Trained on 125K examples (77% security content).

| Filename | Quant | Size |
|----------|-------|------|
| `ravenx-sec-v2.0-Q4_K_M.gguf` | Q4_K_M | 4.7 GB |
| `ravenx-sec-v2.0-Q5_K_M.gguf` | Q5_K_M | 5.4 GB |
| `ravenx-sec-v2.0-Q8_0.gguf` | Q8_0 | 8.1 GB |
| `ravenx-sec-v2.0-f16.gguf` | F16 | 15.3 GB |

## RATH Protocol Output

v3.0 produces structured 4-step security assessments with **specific CVEs, CVSS vectors, vulnerable code, and exploit PoCs:**

```
RATH STEP 1: IDENTIFY
- CVE: CVE-2016-10009, CVE-2016-10010, CVE-2016-10011
- Description: OpenSSH 7.4 — authentication bypass via SSH agent forwarding
- Affected: OpenSSH 7.4

RATH STEP 2: ASSESS
- CVSS Score: 6.3
- CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
- Technical Analysis: SSH agent forwarding vulnerabilities

RATH STEP 3: THREAT
- Attack Scenario: Exploit SSH agent forwarding to bypass auth
- Vulnerable Code: ForwardAgent yes (VULNERABLE) → ForwardAgent no (SAFE)
- Exploit PoC: ssh -o ForwardAgent=yes user@host

RATH STEP 4: REMEDIATE
- Disable SSH agent forwarding unless necessary
- Restrict to specific users via Match blocks
- Validate fix for OpenSSH 7.4 specifically
```

## Training Details

### v3.0 (Latest)

| Parameter | Value |
|-----------|-------|
| **Base Model** | georgehenney/Qwen3-8B-heretic |
| **Method** | MLX LoRA on Apple Silicon (M4 Max 128GB) |
| **LoRA Rank** | 32 |
| **Training Data** | 379,286 examples (84% security) |
| **Security Sources** | 15 datasets |
| **Iterations** | 1500 |
| **Tokens Trained** | 3,019,210 |
| **Peak Memory** | 47.9 GB |

### Security Training Datasets (15 total)

**Offensive / Red Team:**
- WNT3D/Ultimate-Offensive-Red-Team (25,620)
- Rootkit7/pentest-redteam-steering (1,963)
- acnimatic3722/kali-linux-pentesting-data (343)

**Pentest / Bug Bounty:**
- SkywardNomad92/pentest-findings-v2 (50,000)
- theelderemo/pentesting-explanations (5,906)
- AYI-NEDJIMI/bug-bounty-pentest-en (27)
- CJJones/Synthetic_PenTest_Reports (123)

**CVE / Vulnerability:**
- auren-research/cve-sft-v5 (10,000)
- Trendyol/Cybersecurity-Instruction-Tuning (50,000)

**Agentic / Coding:**
- WithinUsAI/AgentAngel_100k (50,000 capped)
- WithinUsAI/claude_mythos_distilled_25k (16,000 security)

**Extracted from Source Repos:**
- hackingBuddyGPT, PentestGPT, Shannon, Ghidra (161)
- Synthetic RATH CVE chains (30)

## Frameworks Supported

CVSS 3.1, NIST CSF 2.0, OWASP Top 10, CWE, MITRE ATT&CK, PCI DSS, HIPAA, SOX

## Source Code

[github.com/DeadByDawn101/RavenX-Sec](https://github.com/DeadByDawn101/RavenX-Sec)

## License

Apache-2.0

---

*"We don't give up. We do what others don't and build what isn't possible." — RavenX LLC*