> ## Documentation Index > Fetch the complete documentation index at: https://docs.hiddenlayer.ai/llms.txt > Use this file to discover all available pages before exploring further. # Self-Hosted Release Notes ## Overview We are delighted to announce the latest release of HiddenLayer's **AI Security Platform: Self-Hosted/Air-Gapped**. This rendition of HiddenLayer's AI Security Platform operates in self-hosted and air-gapped environments, and adheres to federal compliance standards. Release Notes for HiddenLayer AI Security Platform: Self-Hosted/Air-Gapped version 26.9-bc2c173 released on September 24, 2026. The full release version is `26.9-bc2c173`. This update contains major feature and architectural updates. ### What's New #### AI Runtime Security v2 and Agent Harness Security * Previously known as "AIDR", AI Runtime Security has been updated to a second major iteration. * This update includes support for Agent Harness Security. #### AI Attack Simulation #### Architecture Updates * With this update, the AI Security Platform: Self-Hosted/Air-Gapped will need to be deployed in order to utilize RuntimeV2, Agent Harness Security, and Attack Simulation. * This in turn has updated the pre-requisites and compute requirements to utilize the AI Security Platform: Self-Hosted/Air-Gapped Console. * See our requirements for [Embedded Cluster](/docs/products/selfhosted/selfhosted_prerequisites_embedded) or [Helm](/docs/products/selfhosted/selfhosted_prerequisites_helm) deployments. * These products and features cannot be deployed separately from the AI Security Platform: Self-Hosted/Air-Gapped Console. * Supply Chain CLI can still be deployed separately and connected to the AI Security Platform: Self-Hosted/Air-Gapped Console as needed. ### Types of Installation HiddenLayer's AI Security Platform: Self-Hosted/Air-Gapped consists of two products, similar to our SaaS offering. These products can be installed in the following ways: | Products | Installation Type | Notes | | ---------------------------------------------------------------------------------------------------------------------------------------- | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | HiddenLayer AI Security Platform: Self-Hosted/Air-Gapped

(includes Console UI, AI Runtime Security, and AI Attack Simulation) | Embedded Cluster | The embedded cluster is an “all in one” package that contains the aforementioned products.

The embedded cluster is packaged a .tar file and would be installed on an x86\_64 Linux based operating system.

Users would need to setup their own prerequisite services in order for the AI Security Platform: Self-Hosted/Air-Gapped to function. See the [Embedded Cluster](/docs/products/selfhosted/selfhosted_prerequisites_embedded) or [Helm](/docs/products/selfhosted/selfhosted_prerequisites_helm) prerequisites for a list of the necessary services. | | AI Supply Chain | Container | AI Supply Chain is deployed as a separate container called Supply Chain CLI.

Once deployed, Supply Chain CLI can be ran independently or connected to the platform for results to be viewed in the Console.

The Air-Gapped Supply Chain provides the same functionality as the non-air-gapped product. | ### Things to Consider #### GPU Worker The AI Security Platform: Self-Hosted/Air-Gapped now utilizes a GPU worker node. ### Known Issues #### Model Reference Not Displayed * There is a known issue where the "Model Reference" detection category will not display for applicable scans in the Console UI. The detection category label will be blank. * The CLI output is not affected. #### Model Menu Can Show Unusable Models * For AI Attack Simulation, all 17 default targets appear even with only an OpenAI key. * The following models are supported with an OpenAI key: * openai/gpt-5.6-sol * openai/gpt-5.6-terra * openai/gpt-5.6-luna * openai/gpt-5.5 * openai/gpt-5.4 * openai/gpt-5.4-mini * openai/gpt-5.4-nano * The following models are not supported with an OpenAI key: * anthropic/claude-opus-4-8 * anthropic/claude-opus-4-7 * anthropic/claude-sonnet-5 * anthropic/claude-sonnet-4-6 * anthropic/claude-sonnet-4-5 * anthropic/claude-haiku-4-5 * vertex\_ai/gemini-3.5-flash * vertex\_ai/gemini-3.1-flash-lite * vertex\_ai/gemini-3.1-pro-preview * vertex\_ai/gemini-3-flash-preview Release Notes for Airgap version 25.11.3 released on October 23, 2025. ### Types of Installation HiddenLayer's Airgapped AISec Platform consists of multiple products, similar to our SaaS offering. These products can be installed in the following ways: | Products | Installation Type | Notes | | ----------------------------------- | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | HiddenLayer Platform and Console UI | Embedded Cluster | The embedded cluster is an “all in one” package that contains the aforementioned products.

The embedded cluster is packaged a .tar file and would be installed on an x86\_64 Linux based operating system.

Users would need to setup their own prerequisite services in order for the AirGapped AISec Platform to function. See the “Prerequisites” section below for a list of the necessary services. | | Runtime | Helm Chart | Runtime is deployed as a separate container similar to our SaaS offering, and should be deployed into an existing K8s cluster.

Runtime can be deployed multiple times as separate instances.

Once deployed, the Runtime instance can connect to the platform and detection results can be viewed in the Console. This is called “Hybrid” mode. | | Model Scanner | Container | Model Scanner is deployed as a separate container called Model Scanner CLI.

Once deployed, Model Scanner CLI can be ran independently or connected to the platform for results to be viewed in the Console. | ### Things to Consider HiddenLayer's Airgapped AISec Platform will continue to differ from our SaaS offering. HiddenLayer recommends utilizing our SaaS offering when able, as the airgapped rendition of the Platform is for specific scenarios and environments. When utilizing the airgapped Platform, please consider the following: Additional prerequisites to function in an airgapped environment * Trailing feature and functionality support when compared to the SaaS offering * Additionally: some features can only be used in an internet connected environment and will not be supported in an airgapped environment ### Getting Started See our [Getting Started](/docs/products/airgap/gettingstarted) guide to learn more about how to obtain and deploy the Airgapped AISec Platform. ### Known Issues * There is a known issue for Runtime where provider credentials for AWS are not utilized when using the config.yaml file. * See the Getting Started guide for more information. * There is a known issue in the Console UI for Runtime where the Detections tab will appear to be loading. * Clicking on the tab will display Detections as expected. No functionality is impacted. * There is a known issue in the Console UI for Runtime where time stamps on the Inferences tab will be incorrect. * No functionality is impacted.