Research
Minisøk
A fast vulnerability-identification model for scans that need findings without generated solutions.
Overview
Minisøk is the lightweight Vaktex model for vulnerability identification. It is designed to answer one question quickly: where is the risky code, and what class of vulnerability does it look like?
Use Minisøk when you want a focused security pass, a triage report for another tool, or a low-friction scan before handing solution work to a developer or a separate agent.
Minisøk does not provide solutions. In JSONL output, expect finding metadata such as file, vulnerability identifiers, and vulnerability name, but not solution code.
Benchmarks
| Benchmark | Identification | Solutions |
|---|---|---|
| Vaktex Vulnerability Detection | 59.26% | - |
| OWASP Java | 72.15% | - |
Capabilities
- Identifies likely vulnerable code paths and dependency risks
- Returns structured findings suitable for reports, CI, and agent pipelines
- Works well when the next step is human review or a custom solution workflow
- Avoids proposing patches when the workflow only needs evidence and classification
Limitations
Minisøk is not a solution model. It will not generate replacement code, explain a full solution strategy, or populate solution code in JSONL output.
Because it is optimized for identification, teams should pair Minisøk findings with code review, tests, and security judgment before deciding that a vulnerability is exploitable or fully resolved.
Recommended Use
Choose Minisøk for fast vulnerability discovery, continuous scanning, and report-only workflows.
Choose Vakttårn when the scan should also return suggested solutions.