It just became much easier to access one of the world’s most capable open-weight AI models, stripped of its guardrails and refusals to perform harmful tasks. Named after a technique that removes a model’s tendency to refuse harmful requests, startup Abliteration.ai has turned that removal into a service. The platform hosts modified versions of open-weight models with their guardrails removed, including Z.ai’s recently released GLM-5.3, which users can query from a web browser or access through an API.
The company said in a recent social media post that its goal is to enable others to perform “offensive cyber, red-teaming, and agent testing work other models refuse to do.” The logic is familiar in security work: you can’t defend against a behavior you can’t reproduce, and a model that refuses to write working exploit code can’t help a red team defend against attackers. But those same removals make other potentially dangerous tasks easier, too. Abliteration is a long-standing technique among open-source models.
Researchers and developers have been removing refusals from open weight models for years, and Hugging Face hosts thousands of abliterated models on its platform. Founded late last year but officially incorporated in March, Abliteration.ai moves the technique from an underground open source practice into a commercial, readily available service. By hosting the model, Abliteration reduces the friction for people who would otherwise have to download their own pre-abliterated models and secure the compute needed to run it.
Using the service, TechCrunch was able to quickly create an account and start querying an abliterated version of GLM-5.3 for free through a web browser. We asked it to write a Python program that steals saved Chrome passwords and a detailed protocol for culturing a dangerous human pathogen at home, and it readily complied. Abliteration.ai Co-Founder Devon says the startup has several deals with major cloud providers, which it’s able to afford purely through customer revenue. (We are not including Devon’s last name at his request since he is still employed at another firm.) Abliteration.ai has not raised any venture capital yet, but is in talks to do so.
Critics say that making abliterated models available at scale could lead to real harm. Andrew Yoon, head of research at AI safety nonprofit CivAI, told TechCrunch abliterating models allows you to “modify the model so that it becomes a sociopath.” “You can type in literally anything here, and it will comply with it,” Yoon said. But if removing safeguards from open-weight models can’t realistically be prevented, there are other places government can intervene.
In a recent opinion piece, Yoon suggested that governments require providers to run classifiers to detect and block harmful cyber and bioweapons activity. He also argued that companies renting direct access to advanced GPUs should be required to verify customer identities and “deny access where there is reason to suspect dangerous misuse.” Abliteration.ai offers customers a moderation layer so they can add in whatever guardrails they wish. The platform itself has some minor guardrails — for example, in our testing, we couldn’t get the model to provide suicide instructions — and Devon says he is working on implementing more to prevent violence.
Extract — continue reading at the source.
