🔴 Pentesting with AI, but without the cloud: the model that stays in the company arrives

AI-based pentesting no longer requires sending source code to an external cloud service. Belgian company Aikido has introduced Altar, an open-source vulnerability testing model that can run on a corporate infrastructure. Altar is designed for Aikido Machine, where AI agents test applications without transferring sensitive data to an external provider.

Altar is based on Z.AI's GLM-5.3, a large mixture-of-experts architecture model. In this scheme, each request is processed by only a subset of specialized computation blocks, even though the entire set must be maintained. Aikido reduced the number of these blocks from 256 to 168 in each corresponding layer, while maintaining routing that activates eight blocks for each token.