This model was quantized from fdtn-ai/Foundation-Sec-1.1-8B-Instruct to an 8-bit (Q8_0) GGUF checkpoint using llama.cpp. It retains the cybersecurity specialization of the original 8-billion-parameter model while reducing the memory footprint from approximately 16GB (BF16) to around 8.54GB (Q8_0) for inference.
Model Description
fdtn-ai/Foundation-Sec-1.1-8B-Instruct-Q8_0-GGUF is an 8-bit quantized variant of Foundation-Sec-1.1-8B-Instruct — an 8B-parameter LLaMA 3.1–based model that extends the Foundation-Sec-1.1-8B base model with instruction-following capabilities and extended 64k context window support. The base model was continued-pretrained on a curated corpus of cybersecurity-specific text (e.g., CVEs, threat intel reports, exploit write-ups, compliance guides). The instruction fine-tuned model was originally released on November 18, 2025 under Apache 2.0, and excels at tasks such as:
Red-team simulation prompts and security-workflow generation
Rather than re-uploading or replicating the entire training details, please refer to the original model card for foundational architecture, training data, evaluation results, and known limitations.
Quantization Details
Quantization Scheme: 8-bit, "Q8_0" (8-bit quantization with minimal precision loss)
llama-cli -m foundation-sec-1.1-8b-instruct-q8_0.gguf -p "CVE-2021-44228 is a remote code execution flaw in Apache Log4j2 via unsafe JNDI lookups (\"Log4Shell\"). The CWE is CWE-502.\n\nCVE-2017-0144 is a remote code execution vulnerability in Microsoft's SMBv1 server (\"EternalBlue\") due to a buffer overflow. The CWE is CWE-119.\n\nCVE-2014-0160 is an information-disclosure bug in OpenSSL's heartbeat extension (\"Heartbleed\") due to out-of-bounds reads. The CWE is CWE-125.\n\nCVE-2017-5638 is a remote code execution issue in Apache Struts 2's Jakarta Multipart parser stemming from improper input validation of the Content-Type header. The CWE is CWE-20.\n\nCVE-2019-0708 is a remote code execution vulnerability in Microsoft's Remote Desktop Services (\"BlueKeep\") triggered by a use-after-free. The CWE is CWE-416.\n\nCVE-2015-10011 is a vulnerability about OpenDNS OpenResolve improper log output neutralization. The CWE is" -n 128
Llama-cpp GGUF Quantization:
Ggerganov, J. (2022). Llama.cpp: Llama inference in pure C/C++/Assembly/GGUF. GitHub repository.
ZeroQuant:
Yao, Z. et al. (2022). "ZeroQuant: Efficient and Affordable Post-Training Quantization for Large-Scale Transformers." arXiv: 2206.01861.
SmoothQuant:
Xiao, G. et al. (2022). "SmoothQuant: Accurate and Efficient Post-Training Quantization for Large Language Models." arXiv: 2211.10438.
License: Apache 2.0 (same as base) Contact: For questions about usage, quantization details, or license terms, please open an issue on the Hugging Face repo or contact blainen@cisco.com.