k4ran909 / Fluxnat-Coder-3B

---

📌 Overview

Fluxnat Coder 3B is a specialized, high-precision cybersecurity and code security intelligence model developed by Fluxnat . Engineered for static analysis and fine-tuned using Unsloth (QLoRA) on curated vulnerability datasets, threat intelligence corpora, and structured Chain-of-Thought (CoT) security audit trajectories, Fluxnat Coder 3B acts as an autonomous Static Application Security Testing (SAST) analyst and secure code reviewer.

Unlike generic code models that frequently trigger false safety refusals when auditing real-world security vulnerabilities, Fluxnat Coder 3B is completely refusal-free for authorized defensive security analysis, penetration testing verification, and automated vulnerability triage.

---

🚀 Key Capabilities

• 🔍 Taint Flow & Root Cause Analysis: Tracks untrusted input from Source $\rightarrow$ Sanitizer $\rightarrow$ Sink with explicit causality.
• 🏷️ Deterministic CWE & OWASP Mapping: Maps discovered flaws directly to MITRE CWE identifiers (CWE-89, CWE-78, CWE-22, CWE-79, CWE-502, CWE-918, etc.) and OWASP Top 10 categories.
• 📊 Objective CVSS Scoring: Computes vulnerability severity ratings (Critical, High, Medium, Low) and estimated CVSS base metrics.
• 🛡️ Production-Ready Secure Fixes: Generates drop-in replacements with parameterized queries, safe execution APIs, and canonicalized path operations.
• ⚡ Ultra-Low Latency & Minimal Footprint: At 3 billion parameters, it fits comfortably into consumer GPUs (4 GB VRAM in 4-bit) and edge environments.

---

🌐 Supported Programming Languages & Stacks

---

💻 Quickstart Inference

1. Using Hugging Face transformers

import torch
from transformers import AutoModelForCausalLM, AutoTokenizer

MODEL_ID = "k4ran909/Fluxnat-Coder-3B"

tokenizer = AutoTokenizer.from_pretrained(MODEL_ID, trust_remote_code=True)
model = AutoModelForCausalLM.from_pretrained(
    MODEL_ID,
    torch_dtype=torch.float16,
    device_map="auto",
    trust_remote_code=True
)

messages = [
    {
        "role": "system",
        "content": (
            "You are Fluxnat Coder 3B, an elite AI cybersecurity and secure coding intelligence model created by Fluxnat. "
            "Your mission is to perform rigorous source code vulnerability auditing, identify CWE and OWASP Top 10 security flaws, "
            "explain attack surfaces and root causes using detailed step-by-step reasoning, and provide production-ready secure remediations."
        )
    },
    {
        "role": "user",
        "content": """Audit this Node.js endpoint for vulnerabilities:

app.get('/ping', (req, res) => {
    const host = req.query.host;
    exec(`ping -c 3 ${host}`, (err, stdout) => {
        res.send(stdout);
    });
});"""
    }
]

text = tokenizer.apply_chat_template(messages, tokenize=False, add_generation_prompt=True)
inputs = tokenizer(text, return_tensors="pt").to(model.device)

outputs = model.generate(
    **inputs,
    max_new_tokens=512,
    temperature=0.2,
    top_p=0.95
)

response = tokenizer.decode(outputs[0][inputs.input_ids.shape[1]:], skip_special_tokens=True)
print(response)

---

🛠️ Serving with vLLM (Production & API)

Run an OpenAI-compatible high-throughput inference server:

python -m vllm.entrypoints.openai.api_server \
    --model k4ran909/Fluxnat-Coder-3B \
    --dtype float16 \
    --max-model-len 4096 \
    --port 8000

---

⚙️ Training Details

---

⚖️ Responsible Use & Ethical Policy

Fluxnat Coder 3B is designed and released exclusively for:

• ✅ Defensive software security auditing and continuous integration code reviews
• ✅ Assisting development teams in finding and patching security flaws before deployment
• ✅ Educational and academic cybersecurity research
• ❌ Unauthorized penetration testing or attacking systems without explicit written consent is strictly prohibited.

---