CybersecurityText analysis

SecureBERT

A compact language encoder trained on cybersecurity texts: tagging threat reports, finding entities and classification.

The last open version came out in Aug 2023. The family has not been updated for a long time: the model still works, but do not expect fixes or new sizes.

Developer
Ehsan Aghaei and co-authors, USA
First release
Oct 2022
Latest release
Aug 2023
Sizes
около 125M
License
Commercial use with conditionsmixed: the base SecureBERT is BigScience OpenRAIL-M, SecureBERT Plus is CC-BY-NC 4.0 (non-commercial)
Russian
Not supported
Running
On your own serverAlso runs without a GPU
Industries
Security, Science and research
Deploy on your server Hugging Face GitHub

What it does

  • Tagging threat reports and vulnerability bulletins
  • Extracting entities from security texts
  • Classifying and searching an internal incident base

Where it is used

Information security teamsThreat analyticsResearch groups

Hardware requirements

LaptopLaptop or regular PC, up to 8 GB of VRAM — smaller versions
fits
1 GPUOne GPU with 16–80 GB — mid-size versions
no versions
ClusterServer with several GPUs — flagship versions
no versions

Versions

  1. SecureBERT Plus
  2. SecureBERT

How to run it

On your own serverWeights are downloaded from Hugging Face and served with vLLM (load and API) or llama.cpp (modest hardware). The model then runs in a closed network with no per-request fees.Hugging Face
How much hardware you needCalculate the VRAM for the model size, context length and number of concurrent requests.Open the hardware calculator

I can set this up end to end: pick the model size, deploy it on your server and connect it to your systems.

Frequently asked questions

Can SecureBERT be used in a commercial project?

With conditions. License: mixed: the base SecureBERT is BigScience OpenRAIL-M, SecureBERT Plus is CC-BY-NC 4.0 (non-commercial). Restrictions vary — region, company revenue, attribution requirements. Have a lawyer check the terms before a commercial launch.

What hardware does SecureBERT need?

At minimum: Laptop or regular PC, up to 8 GB of VRAM — smaller versions. Some versions also run on an ordinary CPU, without a GPU. You can calculate the exact VRAM for your model size and context in the hardware calculator.

Does SecureBERT support Russian?

No. The developer documentation lists the supported languages and Russian is not among them.

Where can I download SecureBERT and what does it cost?

The SecureBERT weights are open and free to download. You only pay for the hardware it runs on and for the setup. Source links are at the bottom of this page.

How I deploy it for clients

  1. SelectionI pick the model size for your task and hardware and test it on your examples.
  2. DeploymentI deploy it on your server or in a closed network and provide an API.
  3. Fine-tuningI fine-tune it on your data (LoRA) or connect a knowledge base — whichever is cheaper for the task.
  4. IntegrationI connect it to your CRM, ERP, bot, website or team chat and set up monitoring.

Similar models

CybersecurityFoundation-SecCisco (Foundation AI) · USACommercial use with conditions

Cisco models for information security based on Llama 3.1 8B: analysis of vulnerabilities, threats and incidents. Can be deployed inside your own perimeter.

DetailsText analysisModernBERTAnswer.AI and LightOn · USA / FranceCommercial use allowed

A modern replacement for classic BERT: faster, reads up to 8 thousand tokens at once. A base for your own classifiers. Trained on English and code; for Russian there is RuModernBERT.

DetailsText analysisDeBERTa-v3 и mDeBERTa-v3Microsoft · USACommercial use allowed

A time-tested encoder behind many classifiers and NER models (including GLiNER). The multilingual mDeBERTa-v3 understands Russian.

Details

Source: huggingface.co/ehsanaghaei/SecureBERT_Plus. Data checked against the model card on 22 Sep 2026. Have a lawyer review the license before commercial launch.