Poulpe-Gen1-14B

Poulpe is an open-source language model developed by intuitem and fine-tuned from Mistral's Ministral 3 14B Instruct. It specialises in cybersecurity governance, risk and compliance (GRC), with a focus on the French-speaking community: EBIOS Risk Manager (EBIOS RM), ISO/IEC 27005 and security homologation. It answers in French and English.

Poulpe can serve as the AI backend for CISO Assistant, and works on its own or in any application that speaks the OpenAI chat API. This is Poulpe Gen1, iteration v5; later iterations on the same base keep the Gen1 name and are tagged by iteration.

Intended use

  • Questions on the EBIOS RM method: workshops, concepts, vocabulary, rating scales, deliverables.
  • Guiding a risk analysis step by step, from the framing to the risk treatment plan.
  • Calling tools when an application provides them (for example CISO Assistant's MCP tools), and answering in JSON on request.
  • General cybersecurity and IT questions.

Out of scope: topics outside cybersecurity and IT (it declines), legal advice, and decisions taken without human review. Answers can be wrong: check them against the ANSSI guide.

Files

Merged weights in safetensors (bf16, about 27 GB), with the chat template and Poulpe's default system prompt (SYSTEM_PROMPT.txt).

Run

from transformers import pipeline

chat = pipeline("text-generation", model="intuitem/Poulpe-Gen1-14B", device_map="auto", torch_dtype="auto")
print(chat([{"role": "user", "content": "Quels sont les cinq ateliers d'EBIOS RM ?"}], max_new_tokens=400)[0]["generated_text"][-1]["content"])

vLLM: vllm serve intuitem/Poulpe-Gen1-14B.

Without a system prompt, the chat template adds Poulpe's own default prompt, the one it was trained with. Recommended temperature: 0.2.

Evaluation

Scores between 0 and 1, held-out sets. Knowledge and facilitation sets are graded by an LLM judge against reference answers and the source pages; tool calling and JSON are checked deterministically. Judge noise is about ยฑ0.02.

Set Items This release v4 v4.1
Closed-book EBIOS RM questions 337 0.405 0.423 0.372
True, false and partial premises 92 0.403 0.407 0.362
Workshop facilitation (multi-turn) 36 0.528 0.517 0.530
Driving a study with terse replies (multi-turn) 8 0.611 0.425 0.595
Identity, scope, general IT 26 0.790 0.762 0.764
Tool calling (CISO Assistant MCP tools, held out) 36 0.986 0.963 0.899
JSON output (schema-validated) 10 1.000 1.000 1.000
JSON with CISO Assistant's system prompt 10 1.000 1.000 1.000
  • False premises firmly corrected: 12 of 18.
  • Closed-book answers framed with the wrong method or workshop: 30 of 337.
  • Repeated replies in the terse-reply sessions: 3 over 8 sessions.
  • Tool calls claiming an action without calling the tool: 0.

Known limitations

  • Exact wording of rating scales (gravity, likelihood, stakeholder criteria) and the values of the guide's worked examples can be recalled imperfectly; an example value can be presented as if the method fixed it. Check them against the ANSSI guide, or give the model the relevant pages (retrieval) when precision matters.
  • Long studies driven with very short replies can still drift or repeat a step.
  • It follows the EBIOS RM guide v1.5 (2024); the terms of the 2018 version (for example "criticitรฉ" of a stakeholder) are not always mapped to the current ones.
  • Not legal or regulatory advice; a risk analysis remains the responsibility of the people who carry it out.

Training data and sources

Fine-tuned with QLoRA (rank 16) on examples a teacher model (Gemma 4 31B, Apache-2.0) wrote from the documents below: question-answer pairs, corrections of false premises, multi-turn facilitation sessions, plus tool calls and general IT answers produced by the base model. The examples are reformulations, not the documents themselves. Formulas, rating scales and tables that the ANSSI documents only give as figures were transcribed by the teacher from the page images first, and the generated formulas were checked against them. About 40,000 training examples, one epoch on a single RTX 3090.

  • Contient des informations publiques de l'ANSSI (Agence nationale de la sรฉcuritรฉ des systรจmes d'information), rรฉutilisรฉes selon la Licence Ouverte / Etalab, avec l'autorisation de l'ANSSI (21 octobre 2026) pour les documents qui ne portent pas de licence.
  • ENISA reports are reused under CC BY 4.0; ยฉ European Union Agency for Cybersecurity (ENISA).
  • NIST publications are works of the US Government, not subject to copyright in the United States.
  • MITRE ATT&CKยฎ and CAPECโ„ข are used under MITRE's licence (see NOTICE-MITRE.txt). "ยฉ 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation."
Document Publisher Licence
EBIOS RM โ€“ Correction de l'รฉtude de cas ANSSI Etalab 2.0 (cyber.gouv.fr default; co-produced with Club EBIOS)
Fiche mรฉthode โ€“ Ateliers 1 et 3 โ€“ ร‰valuer la gravitรฉ des รฉvรฉnements redoutรฉs ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 1 โ€“ Identifier le pรฉrimรจtre mรฉtier et technique ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 2 โ€“ Identifier et caractรฉriser les sources de risque ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 3 โ€“ Dangerositรฉ des parties prenantes de l'รฉcosystรจme ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 3 โ€“ Dรฉfinir des mesures de sรฉcuritรฉ pour l'รฉcosystรจme ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 4 โ€“ ร‰laborer des graphes d'attaque ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 4 โ€“ ร‰valuer la vraisemblance des scรฉnarios opรฉrationnels ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode โ€“ Atelier 5 โ€“ Structurer les mesures de traitement du risque ANSSI Etalab 2.0 (confirmed)
Fiche mรฉthode homologation โ€“ Identifier l'autoritรฉ d'homologation ANSSI Etalab 2.0 (pending ANSSI confirmation
Fiche mรฉthode homologation โ€“ L'homologation pour les dรฉcideurs ANSSI Etalab 2.0 (pending ANSSI confirmation
Fiche mรฉthode homologation โ€“ L'homologation de sรฉcuritรฉ et la norme ISO/IEC 27001 ANSSI Etalab 2.0 (pending ANSSI confirmation
Fiche mรฉthode homologation โ€“ Systรจme d'information isolรฉ et simple ANSSI Etalab 2.0 (pending ANSSI confirmation
Fiche mรฉthode homologation โ€“ Systรจme d'information rรฉpliquรฉ ANSSI Etalab 2.0 (pending ANSSI confirmation
Fiche mรฉthode homologation โ€“ Organiser une revue des systรจmes d'information ANSSI Etalab 2.0 (pending ANSSI confirmation
Cartographie du systรจme d'information โ€“ Guide d'รฉlaboration en 5 รฉtapes (v1.0 ANSSI Licence Ouverte / Etalab v1
Le guide de l'homologation de sรฉcuritรฉ des systรจmes d'information (v2.2 ANSSI Licence Ouverte / Etalab v2
Guide d'hygiรจne informatique โ€“ Renforcer la sรฉcuritรฉ de son systรจme d'information en 42 mesures (v2.0 ANSSI Licence Ouverte / Etalab v1
La mรฉthode EBIOS Risk Manager โ€“ Le Guide (v1.5, 2024) ANSSI Licence Ouverte / Etalab v1
Cahier des charges du label EBIOS Risk Manager (v3.1) ANSSI Etalab 2.0 (cyber.gouv.fr default)
Panorama de la cybermenace 2025 (mars 2026) ANSSI Licence Ouverte / Etalab v2
ReCyF โ€“ Rรฉfรฉrentiel Cyber France v2.5 (document de travail ANSSI Etalab 2.0 (ANSSI permission 2026-10-21
EBIOS RM โ€“ Support de formation (V2.04 ANSSI Etalab 2.0 (cyber.gouv.fr default; co-produced with Club EBIOS)
EBIOS RM โ€“ Support du stagiaire ANSSI Etalab 2.0 (cyber.gouv.fr default; co-produced with Club EBIOS)
Technical implementation guidance on cybersecurity risk management measures (NIS2 ENISA CC BY 4.0
ENISA Threat Landscape 2025 (v1.3 ENISA CC BY 4.0
MITRE ATT&CK Enterprise MITRE MITRE ATT&CK terms of use (royalty-free
MITRE ATT&CK for ICS MITRE MITRE ATT&CK terms of use (royalty-free
MITRE CAPEC (STIX 2.1) MITRE CAPEC terms of use (royalty-free
NIST Cybersecurity Framework 2.0 (CSWP 29 NIST US public domain; NIST reprint permission outside the US
NIST SP 800-30 Rev. 1 โ€“ Guide for Conducting Risk Assessments (2012) NIST US public domain; NIST reprint permission outside the US
Club EBIOS pages (48), used as practitioner guidance under CC BY 4.0 (site default) or the Creative Commons licence stated in the file

Feedback

Report wrong answers or problems in the CISO Assistant issues, with the question, the answer and the expected one.

Licence

Model weights: Apache-2.0, as the base model. Source documents keep their own licences, listed above.

Downloads last month
55
Safetensors
Model size
14B params
Tensor type
BF16
ยท
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support

Model tree for intuitem/Poulpe-Gen1-14B

Finetuned
(11)
this model
Quantizations
2 models