Skip to content
InfratoApp
Layers / Security / Governance / Model security and supply chain

Model security and supply chain

The model and its supply chain as the asset under attack: weight scanning, serialisation exploits, provenance and signing, poisoned dependencies. Attacking the deployed system through its prompt is red teaming.

NOINDEX

This category is below the depth bar — it holds 3 listings where we would want 12 before trusting a shortlist, so it is excluded from search engines and says so here rather than quietly.

3 in this category
SORTED BY STARS · 2 UNMEASURED, GROUPED LAST

NARROW BY WHAT THIS CATEGORY ASKS

No filter yet. A question becomes a filter once two listings answer it differently — this category has not been read that far.

PRODUCTUSED BYSTARSDOWNLOADS 30D
agent-threat-rulesOpen detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable rules across 10 categories; merged into Microsoft AGT, Cisco AI Defense, MISP, OWASP, FINOS & Sig389FF5 AI Guardrailsno tagline on recordHiddenLayerTotal AI Security

SORTED BY ONE STATED COLUMN · USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY — NOT A POPULARITY FIGURE · NO OVERALL SCORE AND NO RANK COLUMN, BECAUSE BLENDING ADOPTION, STARS AND DOWNLOADS NEEDS WEIGHTS, AND WEIGHTS ARE AN OPINION PRESENTED AS ARITHMETIC

Cite this page

The count and its date sit inside the citation, because “Model security and supply chain” without a date is a claim that quietly goes wrong as the category fills.

infratoapp, “Model security and supply chain — Security / Governance”, read 27 October 2026. 3 listed products. https://www.infratoapp.com/layers/security/model-security

No overall score, and no rank column

Blending adoption, stars and downloads needs weights, and weights are an opinion presented as arithmetic — so this table sorts by one stated column at a time and shows which. This view holds no billing column and joins no billing table: a sponsor cannot appear higher, and the signals meter is a row’s own confidence, never a score you can sort on.

Frequently asked

What is in the Model security and supply chain category?
3 products in the Security / Governance layer of the AI stack. The model and its supply chain as the asset under attack: weight scanning, serialisation exploits, provenance and signing, poisoned dependencies. Attacking the deployed system through its prompt is red teaming. Listed members include agent-threat-rules, F5 AI Guardrails and HiddenLayer. Every fact on each listing carries the page it was read from and the date it was read.
agent-threat-rules or F5 AI Guardrails?
Both are listed under Model security and supply chain. We publish no verdict between them — we hold no benchmark that would support one. What we do hold is the same attribute sheet for each, side by side with the source behind every value, at /compare/agent-threat-rules-vs-calypsoai.
What does a blank mean on a model security and supply chain row?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A listing with a blank has not failed the question; it has not been read for it.
How often are model security and supply chain figures re-read?
Every value carries the date it was read and a link to the page it came from. Prices move fastest and are re-read most often; an attribute read weeks ago says so rather than presenting itself as current. Anything past 21 days is hidden rather than shown stale.
Is this every model security and supply chain there is?
No. This is 3 we have read and can cite. A directory that claimed completeness would be making a promise it cannot keep, so the page states its own count instead and says when a category is too thin to shortlist from.
Can a vendor pay to rank higher here?
No. Nothing on this page can be bought: a sponsor cannot enter a table, reorder a row or change a mark, and there is no ranked position for sale. How the site is paid for, and the line each source of money does not cross, is set out under money and independence at /our-data#sec5.