Cisco's Karbasi Makes the Case for Owning AI, Not Renting It

Cisco's Karbasi Makes the Case for Owning AI, Not Renting It

AI Security · Model Tier
A Black Hat conversation with Cisco's chief AI scientist reframes Antares as a bet on owning intelligence, not renting it.
By Shashi Bellamkonda · August 9, 2026
$0.20
Price per million output tokens, Meta Muse Code contributor tier, paid in training rights
$0.82 vs $141
Cost to run the 500-task VLoc Bench sweep, Cisco Antares versus GPT‑5.5
2024
Year Cisco acquired Robust Intelligence, bringing Karbasi in

Taught at Yale for a decade before a specific problem pulled Amin Karbasi into industry. The tools built to protect a company's code often require sending that code somewhere else first. I spoke with Karbasi at Black Hat this month. He is Vice President and Chief AI Scientist at Cisco Foundation AI, an adjunct professor at Stanford, and a member of the scientific board at the Simons Institute for the Theory of Computing. He joined Cisco through its 2024 acquisition of Robust Intelligence, where he was chief scientist, and he now leads the team behind Antares, the vulnerability-scanning models this site covered in July.

Small Models Solve a Custody Problem

Karbasi traced Antares to a bet the team made a year ago, before coding agents became routine. More generated code means more inherited mistakes, since the models writing that code learned from human code in the first place. The team scaled the model down instead of up: small enough to run on a single GPU, inside a customer's own environment, trained to search a codebase the way an investigator works a lead rather than the way a chatbot answers a question.

That size difference is why the scan runs in minutes instead of hours, and why a 500-task sweep across 290 repositories costs $0.82 instead of $141 (Vijay et al., Cisco Foundation AI, 2026). The number that matters more than either figure never shows up on an invoice.

No source code leaves the building to get that answer.

Access Stays Gated on Purpose

Antares-3B, the strongest model in the family, is not open. Karbasi called the decision deliberate, shaped by risk rather than marketing caution. A tool built to find vulnerabilities can also help someone exploit them, so the team tested its smaller models against compiled production code and confirmed they could not reconstruct an exploit without source-level access, access only a codebase's owner already has. Cisco is building a product around the 3B model instead of releasing its weights. Karbasi said it will land inside Cisco Cloud Control for customer security teams, available even to organizations whose developers never touch Antares directly.

"The companies who last will own the slice of intelligence tied to what makes them different, and rent the rest."

Owning Intelligence Versus Renting It

Karbasi framed the broader bet behind Antares as a question every enterprise will face. Renting intelligence from a vendor exposes a company to decisions it does not control: pricing, and a vendor's ability to cut off access without warning.

Meta launched Muse Code five days earlier, a coding agent with a contributor tier priced at twenty cents per million output tokens in exchange for training rights (Bellamkonda, shashi.co, Aug. 2026). That is the trade Karbasi describes as renting intelligence at a steep discount. Antares is Cisco's bet that some intelligence, the kind that touches a company's own source code, has to be owned instead.

Cisco has not published a false-positive rate for any Antares model. The company says Antares runs advisory, surfacing ranked candidate files for human review rather than blocking merges, and that it has published file-level precision, recall, and F1 to characterize localization performance. Cisco describes ongoing work on clearer finding discrimination and reducing false-positive burden as a current priority, not a resolved question.

What CIOs Should Ask Next

Karbasi's question for CIOs is which slice of intelligence they can afford to rent, and which one they have to own.

CIO/CTO Viability Question
Before extending Antares past a security pilot, ask Cisco which regulatory or industry criteria determine access to the 3B model, and separately, whether Antares' advisory-only design means your security team still needs a second gate before a candidate file reaches a merge decision. Then audit which of your other AI vendors still require source code to leave your environment as a condition of their price. Owning the model does not help if the workflow around it sends the same code out the door.
Karbasi, Amin. Personal interview. Black Hat USA, 6 Aug. 2026.
Karbasi, Amin. Profile. Stanford University, stanford.edu.
Cisco. "Introducing Antares: Highly Efficient Open Weight AI Models for Vulnerability Localization." Cisco Blogs, 21 July 2026, cisco.com.
Vijay, Priyanshu, et al. "Antares: Foundation Models for Agentic Vulnerability Localization." Cisco Foundation AI, 2026, cisco.com.
Bellamkonda, Shashi. "Cisco's Antares Finds Vulnerabilities Cheaply." shashi.co, 22 July 2026, shashi.co.
Bellamkonda, Shashi. "Meta Prices Its Coding Agent Below Cost to Chase the Usage Numbers Investors Want." shashi.co, 9 Aug. 2026, shashi.co.
Disclaimer: This blog reflects my personal views only. Content does not represent the views of my employer, Info-Tech Research Group. AI tools may have been used for brevity, structure, or research support. Please independently verify any information before relying on it.