Sandbox: Security-Scan Models Before Production

The Sandbox is BeyondGuard’s pre-production control gate. Rather than deploying a model from Hugging Face, an open-source repository, or your own Git directly into production, you first run it through a security scan in an isolated environment — before any policy opens it to traffic.

​

Starting a run

From Start New Sandbox Run, each scan is given a run name in the Basic Information section, and you configure:

• Source — Huggingface, Custom, or Git, so models from different distribution platforms go through the same standard process.
• Model Configuration — the model type, the Model URL, and an optional HF Token for pulling from gated or private repositories.
• Security Checks — select which analyses to run, customizing the scope of the scan to your needs.

The scan covers malware checks, file/format integrity checks, and static analysis of the scripts and code contained within the model.

​

Live monitoring and results

Once started, the entire analysis is observable in real time on the Model Information screen:

• Live Data Stream — shows the stages (Download → Checks → Report) as percentages with progress bars; the download, antivirus scan, format-integrity check, and script/code analysis steps can each be watched separately.
• Event Stream — lists the result of each check chronologically with timestamps (files scanned/skipped, findings detected), marks each check Success or Failed, and expands to show duration and sub-details.

When the run completes, a detailed report of all findings is exported with Report Download.

​

Related