Hugging Face Strengthens AI Security with Wiz

Hugging Face announced a partnership with cloud security company Wiz to improve security across its platform and the AI/ML ecosystem.

Through this collaboration, Hugging Face has introduced the following security features:

• Vulnerability Management: Continuous and proactive management of security vulnerabilities within the platform.
• Cloud Security Posture Management (CSPM): Securely configuring and monitoring cloud environments.
• Automated remediation: Using Wiz's tooling to automatically resolve issues detected in products such as Spaces.

In addition, all vulnerability issues in sandboxed computing environments involving pickle files, discovered by the Wiz research team, have been resolved, and the use of secure alternatives such as Safetensors is recommended for security.

Hugging Face continues to build out the open-source AI security ecosystem through Picklescan, developed in collaboration with Microsoft, and the security-audited Safetensors.