Jan AI Technology Detection Scanner
This scanner detects the use of Jan AI in digital assets. It helps identify deployments of the Jan AI local server, an open-source ChatGPT alternative.
Short Info
Level
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
3 weeks 21 hours
Scan only one
URL
Toolbox
The Jan AI local server is a ChatGPT alternative designed to run models locally. It is often utilized by organizations requiring a customizable AI solution hosted on their own infrastructure. Users in research, development, and industries requiring AI for specific tasks find it beneficial due to its flexibility. Its ability to expose an OpenAI-compatible API makes it a feasible choice for integrating existing AI models. The software is popular among developers looking for open-source platforms to build upon. It primarily targets tech-savvy users due to its complex setup and configuration.
This scanner focuses on identifying the deployment of Jan AI servers across networks. It checks for the presence of Jan AI's specific API endpoints and their responses. By confirming the software's availability, the scanner assists in resource management and software inventory. Identifying this technology is crucial for auditing digital environments where AI models could be utilized. Detection also aids in ensuring compliance with domain-specific guidelines. By recognizing the underlying AI model, administrators can evaluate effectiveness and security.
The scanner meticulously probes the endpoints "/v1/models" and "/healthz" to confirm the presence of Jan AI software. It checks for specific response objects such as "object:model" in the payload, which helps verify the existence of Jan AI. Additionally, it examines the 'Content-Type' header to detect application/json responses. This meticulous method helps establish whether a server is running Jan AI's local models. By ensuring only accurate detections, false positives can be reduced significantly. Successful matching indicates that Jan AI's API is functioning correctly.
When malicious actors exploit detected APIs, improper configurations can lead to unauthorized access. If left undetected, sensitive AI models can be exposed to external threats. Misuse of open AI-compatible APIs could result in data leakage or processing of malicious queries. Unnoticed deployments might become entry points for Denial of Service (DoS) attacks. Awareness of such technology usage helps in mitigating legal and compliance risks. Organizations with exposed AI models may inadvertently compromise user privacy and data protection standards.
REFERENCES
