Self-Hosted Release Notes - HiddenLayer Docs

Overview

We are delighted to announce the latest release of HiddenLayer’s AI Security Platform: Self-Hosted/Air-Gapped. This rendition of HiddenLayer’s AI Security Platform operates in self-hosted and air-gapped environments, and adheres to federal compliance standards.

Release Notes for HiddenLayer AI Security Platform: Self-Hosted/Air-Gapped version 26.9-bc2c173 released on September 24, 2026.

The full release version is 26.9-bc2c173.

This update contains major feature and architectural updates.

What’s New

AI Runtime Security v2 and Agent Harness Security

Previously known as “AIDR”, AI Runtime Security has been updated to a second major iteration.
This update includes support for Agent Harness Security.

AI Attack Simulation

Architecture Updates

With this update, the AI Security Platform: Self-Hosted/Air-Gapped will need to be deployed in order to utilize RuntimeV2, Agent Harness Security, and Attack Simulation.
- This in turn has updated the pre-requisites and compute requirements to utilize the AI Security Platform: Self-Hosted/Air-Gapped Console.
  - See our requirements for Embedded Cluster or Helm deployments.
These products and features cannot be deployed separately from the AI Security Platform: Self-Hosted/Air-Gapped Console.
- Supply Chain CLI can still be deployed separately and connected to the AI Security Platform: Self-Hosted/Air-Gapped Console as needed.

Types of Installation

HiddenLayer’s AI Security Platform: Self-Hosted/Air-Gapped consists of two products, similar to our SaaS offering.These products can be installed in the following ways:

Products	Installation Type	Notes
HiddenLayer AI Security Platform: Self-Hosted/Air-Gapped (includes Console UI, AI Runtime Security, and AI Attack Simulation)	Embedded Cluster	The embedded cluster is an “all in one” package that contains the aforementioned products. The embedded cluster is packaged a .tar file and would be installed on an x86_64 Linux based operating system. Users would need to setup their own prerequisite services in order for the AI Security Platform: Self-Hosted/Air-Gapped to function. See the Embedded Cluster or Helm prerequisites for a list of the necessary services.
AI Supply Chain	Container	AI Supply Chain is deployed as a separate container called Supply Chain CLI. Once deployed, Supply Chain CLI can be ran independently or connected to the platform for results to be viewed in the Console. The Air-Gapped Supply Chain provides the same functionality as the non-air-gapped product.

Things to Consider

GPU Worker

The AI Security Platform: Self-Hosted/Air-Gapped now utilizes a GPU worker node.

Known Issues

Model Reference Not Displayed

There is a known issue where the “Model Reference” detection category will not display for applicable scans in the Console UI. The detection category label will be blank.
- The CLI output is not affected.

For AI Attack Simulation, all 17 default targets appear even with only an OpenAI key.
The following models are supported with an OpenAI key:
- openai/gpt-5.6-sol
- openai/gpt-5.6-terra
- openai/gpt-5.6-luna
- openai/gpt-5.5
- openai/gpt-5.4
- openai/gpt-5.4-mini
- openai/gpt-5.4-nano
The following models are not supported with an OpenAI key:
- anthropic/claude-opus-4-8
- anthropic/claude-opus-4-7
- anthropic/claude-sonnet-5
- anthropic/claude-sonnet-4-6
- anthropic/claude-sonnet-4-5
- anthropic/claude-haiku-4-5
- vertex_ai/gemini-3.5-flash
- vertex_ai/gemini-3.1-flash-lite
- vertex_ai/gemini-3.1-pro-preview
- vertex_ai/gemini-3-flash-preview

Release Notes for Airgap version 25.11.3 released on October 23, 2025.

Types of Installation

HiddenLayer’s Airgapped AISec Platform consists of multiple products, similar to our SaaS offering.These products can be installed in the following ways:

Products	Installation Type	Notes
HiddenLayer Platform and Console UI	Embedded Cluster	The embedded cluster is an “all in one” package that contains the aforementioned products. The embedded cluster is packaged a .tar file and would be installed on an x86_64 Linux based operating system. Users would need to setup their own prerequisite services in order for the AirGapped AISec Platform to function. See the “Prerequisites” section below for a list of the necessary services.
Runtime	Helm Chart	Runtime is deployed as a separate container similar to our SaaS offering, and should be deployed into an existing K8s cluster. Runtime can be deployed multiple times as separate instances. Once deployed, the Runtime instance can connect to the platform and detection results can be viewed in the Console. This is called “Hybrid” mode.
Model Scanner	Container	Model Scanner is deployed as a separate container called Model Scanner CLI. Once deployed, Model Scanner CLI can be ran independently or connected to the platform for results to be viewed in the Console.

Things to Consider

HiddenLayer’s Airgapped AISec Platform will continue to differ from our SaaS offering. HiddenLayer recommends utilizing our SaaS offering when able, as the airgapped rendition of the Platform is for specific scenarios and environments.When utilizing the airgapped Platform, please consider the following:Additional prerequisites to function in an airgapped environment

Trailing feature and functionality support when compared to the SaaS offering
Additionally: some features can only be used in an internet connected environment and will not be supported in an airgapped environment

Getting Started

See our Getting Started guide to learn more about how to obtain and deploy the Airgapped AISec Platform.

Known Issues

There is a known issue for Runtime where provider credentials for AWS are not utilized when using the config.yaml file.
- See the Getting Started guide for more information.
There is a known issue in the Console UI for Runtime where the Detections tab will appear to be loading.
- Clicking on the tab will display Detections as expected. No functionality is impacted.
There is a known issue in the Console UI for Runtime where time stamps on the Inferences tab will be incorrect.
- No functionality is impacted.

​Overview

​What’s New

​AI Runtime Security v2 and Agent Harness Security

​AI Attack Simulation

​Architecture Updates

​Types of Installation

​Things to Consider

​GPU Worker

​Known Issues

​Model Reference Not Displayed

​Model Menu Can Show Unusable Models

​Types of Installation

​Things to Consider

​Getting Started

​Known Issues

Overview

What’s New

AI Runtime Security v2 and Agent Harness Security

AI Attack Simulation

Architecture Updates

Types of Installation

Things to Consider

GPU Worker

Known Issues

Model Reference Not Displayed

Model Menu Can Show Unusable Models

Types of Installation

Things to Consider

Getting Started

Known Issues