Mistral AI has released downloadable weights for Mistral Large 4 (ML4), giving organizations the option to run and adapt it locally as the French company reports cyber benchmarks and examines potential misuse.
The weights became available Oct. 29, after a public preview that began Oct. 6. Mistral says the multimodal model can be customized for tasks including defensive cybersecurity and deployed with tools such as vLLM or SGLang. The company has argued that running a model locally lets organizations set their own policies and that hosted providers’ refusals can hinder legitimate vulnerability research or incident response.
Mistral reported a 51% score for the released model on the Artificial Analysis Cyber Index, which assesses vulnerability discovery, reproduction, validation and patching. The company also reported an average 96.6% refusal rate for malicious cyber prompts drawn from JailbreakBench, StrongREJECT and AgentHarm. Those test results do not establish how the model will perform in every organization’s production environment.
Mistral said monitoring of cybersecurity-related live traffic showed the model refusing black-box attacks against live targets. The company also said it saw potential for ML4 to help conduct real attacks and is adjusting the model’s safeguards.
The release continues Mistral’s work on local access to its models. In an earlier EconoTimes report on a separate cyber-focused variant, the company said that version would be limited to a vetted partner program.
Mistral’s Ecosystem Open-Weight License permits users to modify the model and build commercial products with it. Companies that commercially operate ML4 through a Model-as-a-Service offering must obtain a separate license from Mistral.
Euronews reported that organizations hosting the model themselves need suitable hardware and technical expertise. The Hugging Face model card includes local-serving instructions but does not specify minimum hardware requirements or total operating costs.
Mistral said a technical report is forthcoming but gave no publication date.
