Maroon Elephant

Enterprise

AI-era threat modeling — scan your org worst-first, mapped to OWASP 2026 · MAESTRO · AIVSS.

Targets

Bring Your Own Token (BYOK)

The deterministic core runs entirely on your machine and needs no key. LLM enrichment is optional; when on, it uses your key — stored only in this browser, never sent to any Maroon Elephant server.

What is BYOT / BYOK?

“Bring Your Own Token” means you plug in your own API key from an AI provider so your code and data stay under your control — Maroon Elephant never proxies them. You pay your provider directly (usually cents per scan). Set a spend cap in your provider console. Prefer Ollama for a fully local, zero-cost, air-gapped run.

  • Anthropic / OpenAI / Google: create a key in the provider’s console, paste it above.
  • Ollama: install Ollama and pull a model — no key, nothing leaves your machine.
  • Leave the provider as “none” to run deterministically with no AI calls at all.