Introduction

🏰 Palisade: The Firewall for Your AI Models

Palisade is an enterprise-grade security scanner for LLMs and Deep Learning models. It can detect backdoors, malicious pickles, and supply chain attacks before they hit production.

Most model scanners are slow or miss behavioral exploits. Palisade is different:

• 🚀 Blazing Fast: Powered by a Rust core, capable of scanning 70B+ parameter models on standard hardware without OOM.

• 🛡️ Blocks Pickle RCE: Completely prevents remote code execution via unsafe serialization.

• ⚙️ Native CI/CD Integration: Palisade is built for pipelines. Gate your deployments using exit codes.

• 🕵️ Behavioral Detection: Catches fine-tuning attacks that static analysis misses. (Currently in BETA)

• 📦 Supply Chain Verification

  • 🔐 Sigstore Signature Verification: Answers: "Who signed this model?" — Validates cryptographic signatures to ensure the model came from a trusted source.

  • 🏗️ SLSA Provenance Verification: Answers: "How was this model built?" — Validates build attestations to ensure supply chain integrity.

  • 📋 Provenance Tracking & ML-BOM: Answers: "What provenance exists?" — Discovers all provenance documentation and generates ML-BOM inventory.

• ✅ Standards & Compatibility

  • 🔒 CoSAI Compliant: Designed to align with the Coalition for Secure AI (CoSAI) standards for software supply chain security.

  • 📊 Multiple Output Formats: Supports output report formats in JSON and SARIF.