| --- |
| title: OpenMythos |
| emoji: 🛡️ |
| colorFrom: gray |
| colorTo: indigo |
| sdk: gradio |
| sdk_version: 6.18.0 |
| python_version: '3.13' |
| app_file: app.py |
| pinned: true |
| short_description: An Open Source Cyber Security Agent |
| license: apache-2.0 |
| tags: |
| - gradio |
| - build-small-hackathon |
| - backyard-ai |
| - track:backyard |
| - sponsor:modal |
| - achievement:offbrand |
| - achievement:welltuned |
| - achievement:fieldnotes |
| - achievement:offgrid |
| --- |
| |
| # OpenMythos 🌌 |
|
|
| **Paste your codebase. Our AI security agent audits the repository** a multi-level vulnerability analysis, a visual dependency risk path, a declared threat level then generates an instant, verifiable hotfix patch before threat actors can exploit it. |
|
|
| Built during the **Hugging Face Small Gradio Hackathon** OpenMythos democratizes cutting-edge security auditing. It bridges an immersive retro terminal interface with the elite agentic reasoning and long-context preservation architecture of a fine-tuned dense model. |
|
|
| > ⚠️ **Proactive Defense.** This platform is engineered for defensive security intelligence. It aims to discover flaws, memory leaks, security configurations, and input bugs instantly, empowering software engineering teams to deploy hotfixes long before a threat vector is weaponized. |
|
|
| --- |
|
|
| ## ▶️ See it in action |
|
|
| - **Demo Video:** https://www.youtube.com/watch?v=EQyHawWfyZ0 |
| - **Social Post:** [X](https://x.com/kingnish24/status/2066602499356889493) [Linkedin](https://www.linkedin.com/feed/update/urn:li:activity:7472370083663765504) [Reddit](https://www.reddit.com/r/LocalLLaMA/comments/1u6qw5b/we_trained_a_cybersecurityfocused_mythos_like_llm/) |
| - **Blog Post:** https://huggingface.co/blog/KingNish/openmythos |
|
|
| --- |
|
|
| ## 🏕️ Hackathon Categories |
|
|
| | Category | Why OpenMythos Qualifies | |
| |:---------|:-------------------------| |
| | **Main Track: Backyard AI** | Solves a real, specific problem for real people: software teams need instant security auditing. The person is every developer who ships code and wants to catch vulnerabilities before attackers do. | |
| | **🔌 Off the Grid** | **100% Local & Privacy-First.** The entire pipeline runs with zero cloud API dependencies just a local model endpoint. Your code never leaves your machine. | |
| | **🎯 Well-Tuned** | Built on a **Qwen3.6-27B** base fine-tuned via SFT on cybersecurity dataset. The fine-tuned model: https://huggingface.co/build-small-hackathon/OpenMythos | |
| | **🎨 Off-Brand** | Fully custom terminal-inspired UI all pushing far past the default Gradio look. | |
|
|
| ### Bonus Quests |
|
|
| | Badge | Status | Notes | |
| |:------|:-------|:------| |
| | 🔌 Off the Grid | ✅ **Earned** | Local-first by design | |
| | 🎯 Well-Tuned | ✅ **Earned** | SFT on cybersecurity data; model to be published | |
| | 🎨 Off-Brand | ✅ **Earned** | Custom CSS, SVG, terminal theme | |
| | 📓 Field Notes | ✅ **Earned** | Blog post: https://huggingface.co/blog/KingNish/openmythos | |
|
|
| ## Why it's worth a look |
|
|
| - 🔌 **100% Local & Privacy-First.** Designed as a fully open-source alternative to proprietary security intelligence layers (like Claude's Mythos model). It can be run entirely locally, requiring zero internet connectivity or external dependencies to operate. |
|
|
| ## How it works |
|
|
| A multi-stage engineering pipeline built around aggregated, industry-standard security sources: |
|
|
| | Stage | Role | Source Data / Methodology | |
| |:-----:|------|---------------------------| |
| | **1** | **Data Prep & Aggregation** | Incident reports, GitHub Advisory, VulnHub, and papers. Rigorously trained on BigVul-Filtered and Arvix-Filtered sets. | |
| | **2** | **Initial Fine-Tuning (SFT)** | Supervised Fine-Tuning on cybersecurity tasks. Qwen3.6-27B Base (Up to 32K+ token context window). | |
|
|
| The entire pipeline leverages highly specialized weights to ensure an elite vulnerability discovery rate. No massive API dependencies anywhere: a clever chain of targeted engineering delivers the whole security suite. |
|
|
| ## 🤝 Project Contributors |
|
|
| Developed with ❤️ during the **Hugging Face Small Gradio Hackathon** by: |
|
|
| - **KingNish** – [HuggingFace Profile](https://huggingface.co/KingNish) |
| - **Himanshu** – [HuggingFace Profile](https://huggingface.co/himanshu17HF) |
|
|
| *Built for the Build Small Hackathon. Model: [OpenMythos](https://huggingface.co/build-small-hackathon/OpenMythos) · Dataset: [CVE Vulnerabilities Detailed](https://huggingface.co/datasets/build-small-hackathon/CVE_Vulnerailities_Detailed) · [ArXiv cs.CR Filtered](https://huggingface.co/datasets/himanshu17HF/ArvixImport-Filtered-Final) · Space: [OpenMythos](https://huggingface.co/spaces/build-small-hackathon/OpenMythos)* |
