DETECTCatch what it did — including what it hid.
Fingerprint the recipe, compare two finetunes, and surface undisclosed or backdoor behavior the description never mentions — witnessed.
●THE PRODUCT — ONE ENGINE, THREE VERBS
One product for the model
you can’t trust.
Detect what a finetune did — including what it hid — attest it, and cut out the bad part with proof.
ONE ENGINE · THREE VERBS
The same capability that lets Protora read a finetune lets it police one — detect, attest, excise, packaged rung by rung.
●THE ONE PRODUCT
Three verbs, one engine.
Protora is the thing you run on any finetuned open model you can’t trust — three verbs on one engine, packaged across a ladder of surfaces. One glance, three reads.
DETECT
ATTESTSign what was found, or changed.
A signed evidence artifact of exactly what was found — or exactly what was changed.
EXCISECut out the bad part — prove only that changed.
Surgically remove the detected behavior, then attest that only that behavior changed — reversible, not a blind re-finetune. It ships as a free, trustless Corrective Patch: apply it, hold the Protora variant, verify it yourself.
●THE SURFACES
Seven surfaces, one capability.
They differ in who buys, what they get, and how it’s delivered — never in how the engine works. Each carries its own availability chip; nothing staged is dressed as available today.
Public detection record
IN THE OPENNo buyer — the flywheel
Run DETECT on well-known public finetunes and publish what they actually did — including anything the model card never mentioned — witnessed, with the misses owned out loud. The credibility engine, and the standing demonstration.
Read the record →Self-serve detect
STAGEDIndividual builders · researchers
Point Protora at a finetune before you trust it and get a witnessed read of what it did — recipe fingerprint, finetune-to-finetune comparison, undisclosed behavior — with an explicit abstain list for what it couldn’t prove. The free adoption wedge.
Open Self-serve detect →Monitoring
STAGEDTeams shipping on open models
A standing DETECT + ATTEST on a model or family: every new finetune and release checked, witnessed, and diffed, with alerts on material or hidden change. The recurring engine.
Open Monitoring →Audit + dossier
OPEN NOWA company or lab, once
A deep DETECT on one model plus the signed compliance dossier — the EU-AI-Act and NIST evidence artifact — delivered as a signed dossier and a portal. Lowest infrastructure; the runway, open now.
Open Audit + dossier →Excise
TRUST-GATEDTeams with a finetune they can’t ship as-is
Surgically remove a detected bad behavior and attest that only that changed — a proven, reversible fix, not a blind re-finetune. The remedy ships as a free, trustless patch (customer-derivable public math — R-EXCISE-PATCH-RE = 0, scoped to the free public patches, never presented as leak-proof); only the deploy-to-a-shipping-model path stays trust-gated — live deploy waits for the measured track record, by rule.
Open Excise →Drift guard
STAGEDTeams finetuning
DETECT drift during a finetuning run and alarm before it finishes if it heads toward misalignment or a backdoor — then emit a signed training-drift attestation. The compliance surface.
Open Drift guard →Portfolio analytics
STAGEDAI · model-risk leadership
Trends over the same detections and attestations: which finetunes, recipes, and providers stay clean over time, and which deployed models carry a current attestation. The governance view.
Open Portfolio analytics →
◐THE ELEVATION
Sell it once, to the platform.
The seven surfaces sell the capability one model at a time, to the model’s consumer. An eighth packaging changes the ceiling of the business: sell it once, to the platform that hosts the models. A model hub that embeds Protora can attest its whole catalog — DETECT + ATTEST at serve-time, EXCISE as the remediation path — turning a per-model audit into a platform-integrity layer and reaching every downstream consumer through one integration.
Its enabling constraint, and its sharpest honesty obligation, is keeping the badge honest at scale — coverage-bounded, witnessed, never “certified safe.”
See the platform layerPARTNER
THE ONE RULE — ACROSS ALL SURFACES
Every surface describes Protora the same way: capabilities and outputs — what it detects, what a finding contains, what an attestation proves. And every surface obeys the honesty discipline: ● proven labeled proven, ◐ inferred labeled inferred, ○ abstain shown as abstain, ceilings published and never exceeded — and no claim of catching every backdoor.
A surface that overclaims or invents a finding is a defect — regardless of how good it looks.
Run it on the model
you can’t trust.
Bring one finetune — the one you’re about to ship, or the one you just downloaded. Protora will tell you what it did, prove it, and tell you plainly what it couldn’t prove.
Every engagement is scoped per case and quoted per offer — tell us what you need, and we’ll scope it and send you an offer.