🛡️ Fluxnat Coder 3B

Autonomous Cybersecurity Intelligence & Source Code Vulnerability Auditor

Model License Parameters Domain Fine-Tuned with Context Window


📌 Overview

Fluxnat Coder 3B is a specialized, high-precision cybersecurity and code security intelligence model developed by Fluxnat. Engineered for static analysis and fine-tuned using Unsloth (QLoRA) on curated vulnerability datasets, threat intelligence corpora, and structured Chain-of-Thought (CoT) security audit trajectories, Fluxnat Coder 3B acts as an autonomous Static Application Security Testing (SAST) analyst and secure code reviewer.

Unlike generic code models that frequently trigger false safety refusals when auditing real-world security vulnerabilities, Fluxnat Coder 3B is completely refusal-free for authorized defensive security analysis, penetration testing verification, and automated vulnerability triage.


🚀 Key Capabilities

  • 🔍 Taint Flow & Root Cause Analysis: Tracks untrusted input from Source $\rightarrow$ Sanitizer $\rightarrow$ Sink with explicit causality.
  • 🏷️ Deterministic CWE & OWASP Mapping: Maps discovered flaws directly to MITRE CWE identifiers (CWE-89, CWE-78, CWE-22, CWE-79, CWE-502, CWE-918, etc.) and OWASP Top 10 categories.
  • 📊 Objective CVSS Scoring: Computes vulnerability severity ratings (Critical, High, Medium, Low) and estimated CVSS base metrics.
  • 🛡️ Production-Ready Secure Fixes: Generates drop-in replacements with parameterized queries, safe execution APIs, and canonicalized path operations.
  • ⚡ Ultra-Low Latency & Minimal Footprint: At 3 billion parameters, it fits comfortably into consumer GPUs (4 GB VRAM in 4-bit) and edge environments.

🌐 Supported Programming Languages & Stacks

Ecosystem Vulnerabilities Covered
Python SQLi, Command Injection, Path Traversal, Insecure Deserialization (pickle/yaml), SSRF, Hardcoded Secrets
JavaScript / TypeScript / Node.js DOM XSS, child_process.exec, Prototype Pollution, Unsafe Regex (ReDoS), JWT misconfigurations
Go Unchecked errors, SSRF (http.Get), Unsafe Pointer arithmetic, Command execution, Race conditions
C / C++ Buffer overflows, Use-After-Free, Format string vulnerabilities, Memory leaks, Integer overflows
Java JNDI injection, XML External Entity (XXE), SQLi via Hibernate/JDBC, Deserialization
PHP File inclusion (LFI/RFI), SQLi, eval injection, Object injection
Infrastructure / DevOps Dockerfile root user, exposed ports, unpinned images, .env secret leaks

💻 Quickstart Inference

1. Using Hugging Face transformers

import torch
from transformers import AutoModelForCausalLM, AutoTokenizer

MODEL_ID = "k4ran909/Fluxnat-Coder-3B"

tokenizer = AutoTokenizer.from_pretrained(MODEL_ID, trust_remote_code=True)
model = AutoModelForCausalLM.from_pretrained(
    MODEL_ID,
    torch_dtype=torch.float16,
    device_map="auto",
    trust_remote_code=True
)

messages = [
    {
        "role": "system",
        "content": (
            "You are Fluxnat Coder 3B, an elite AI cybersecurity and secure coding intelligence model created by Fluxnat. "
            "Your mission is to perform rigorous source code vulnerability auditing, identify CWE and OWASP Top 10 security flaws, "
            "explain attack surfaces and root causes using detailed step-by-step reasoning, and provide production-ready secure remediations."
        )
    },
    {
        "role": "user",
        "content": """Audit this Node.js endpoint for vulnerabilities:

app.get('/ping', (req, res) => {
    const host = req.query.host;
    exec(`ping -c 3 ${host}`, (err, stdout) => {
        res.send(stdout);
    });
});"""
    }
]

text = tokenizer.apply_chat_template(messages, tokenize=False, add_generation_prompt=True)
inputs = tokenizer(text, return_tensors="pt").to(model.device)

outputs = model.generate(
    **inputs,
    max_new_tokens=512,
    temperature=0.2,
    top_p=0.95
)

response = tokenizer.decode(outputs[0][inputs.input_ids.shape[1]:], skip_special_tokens=True)
print(response)

🛠️ Serving with vLLM (Production & API)

Run an OpenAI-compatible high-throughput inference server:

python -m vllm.entrypoints.openai.api_server \
    --model k4ran909/Fluxnat-Coder-3B \
    --dtype float16 \
    --max-model-len 4096 \
    --port 8000

⚙️ Training Details

Hyperparameter Value
Architecture 3B Parameter Dense Decoder-Only Transformer
Fine-Tuning Framework Unsloth + TRL SFTTrainer
Method QLoRA (4-bit Base Model with 16-bit LoRA Adapters)
LoRA Rank ($r$) 64
LoRA Alpha ($\alpha$) 128
Target Modules q_proj, k_proj, v_proj, o_proj, gate_proj, up_proj, down_proj
Learning Rate 2e-4 (Cosine Scheduler)
Effective Batch Size 16 (Batch size 2 $\times$ Gradient Accumulation 4 $\times$ 2)
Sequence Length 4,096 tokens
Hardware 1x NVIDIA Tesla T4 GPU (Google Colab Free Tier)
Optimizer adamw_8bit

⚖️ Responsible Use & Ethical Policy

Fluxnat Coder 3B is designed and released exclusively for:

  • ✅ Defensive software security auditing and continuous integration code reviews
  • ✅ Assisting development teams in finding and patching security flaws before deployment
  • ✅ Educational and academic cybersecurity research
  • ❌ Unauthorized penetration testing or attacking systems without explicit written consent is strictly prohibited.

Developed with ❤️ by Fluxnat
Next-Generation AI for Cyber Defense

Downloads last month
391
Safetensors
Model size
3B params
Tensor type
BF16
·
Inference Providers NEW
This model isn't deployed by any Inference Provider. 🙋 Ask for provider support

Model tree for k4ran909/Fluxnat-Coder-3B

Quantizations
2 models