alt.freeweights.vision / siglip2-so400m-patch16-naflex
From: google <huggingface.co/google>Newsgroups: alt.freeweights.visionSubject:

siglip2-so400m-patch16-naflex

Date: 2026-11-14Commit: cc24074Signed: 2DC28CC7B26A283B ✓

Zero shot image classification model with 1.1B parameters. Safetensors weights, 4.58 GB in all. Published by google under Apache-2.0.

1.1B params4.58GBsiglip2-so400m-patch16-naflexsafetensorspermissive
FactsParams1.1BSize4.58 GBFormatssafetensorsTaskzero shot image classificationLicenseApache-2.0From sourcepermissive
$ fw get google/siglip2-so400m-patch16-naflex
# manifest sha256 c0cc09828c5c… · 4.58 GB · 9 files
$ fw verify ./siglip2-so400m-patch16-naflex google/siglip2-so400m-patch16-naflex
From sourceHosted (signed)google/siglip2-so400m-patch16-naflexLast check: 2026-11-14 21:37 UTC

Get help: custom fine-tune or private deploy. We review your setup before we quote.

Overview

Size
4.58 GB
Weights
4.54 GB (safetensors)
Parameters
1.1B
Formats
safetensors
Task
zero shot image classification
License
Apache-2.0 (permissive)
Files
9, each with a sha256
Publisher
google
Added
2026-11-14
Section
alt.freeweights.vision
Lineage

Original release from the publisher.

Where these bytes come from
Publisher at the pinned commit→You

Sources are tried in order. A file counts only when its size and sha256 match the manifest. Sources are checked when you ask for them, not on a timer.

Sources
BadgeHostLast checkResult
From sourcehuggingface.co2026-11-14 21:37 UTCpassed

Model card

From the publisher at commit cc24074. Shown as plain text with links; images open at the publisher.

SigLIP 2 So400m#

SigLIP 2 extends the pretraining objective of SigLIP with prior, independently developed techniques into a unified recipe, for improved semantic understanding, localization, and dense features.

Intended uses#

You can use the raw model for tasks like zero-shot image classification and image-text retrieval, or as a vision encoder for VLMs (and other vision tasks).

Here is how to use this model to perform zero-shot image classification:

from transformers import pipeline

# load pipeline
ckpt = "google/siglip2-so400m-patch16-naflex"
image_classifier = pipeline(model=ckpt, task="zero-shot-image-classification")

# load image and candidate labels
url = "http://images.cocodataset.org/val2017/000000039769.jpg"
candidate_labels = ["2 cats", "a plane", "a remote"]

# run inference
outputs = image_classifier(image, candidate_labels)
print(outputs)

You can encode an image using the Vision Tower like so:

import torch
from transformers import AutoModel, AutoProcessor
from transformers.image_utils import load_image

# load the model and processor
ckpt = "google/siglip2-so400m-patch16-naflex"
model = AutoModel.from_pretrained(ckpt, device_map="auto").eval()
processor = AutoProcessor.from_pretrained(ckpt)

# load the image
image = load_image("https://huggingface.co/datasets/merve/coco/resolve/main/val2017/000000000285.jpg")
inputs = processor(images=[image], return_tensors="pt").to(model.device)

# run infernece
with torch.no_grad():
    image_embeddings = model.get_image_features(**inputs)    

print(image_embeddings.shape)

For more code examples, we refer to the siglip2 documentation.

Training procedure#

SigLIP 2 adds some clever training objectives on top of SigLIP:

  1. Decoder loss
  2. Global-local and masked prediction loss
  3. Aspect ratio and resolution adaptibility
Training data#

SigLIP 2 is pre-trained on the WebLI dataset (Chen et al., 2023).

Compute#

The model was trained on up to 2048 TPU-v5e chips.

Evaluation results#

Evaluation of SigLIP 2 is shown below (taken from the paper).

Image: Evaluation Table

BibTeX entry and citation info#
@misc{tschannen2025siglip2multilingualvisionlanguage,
      title={SigLIP 2: Multilingual Vision-Language Encoders with Improved Semantic Understanding, Localization, and Dense Features}, 
      author={Michael Tschannen and Alexey Gritsenko and Xiao Wang and Muhammad Ferjad Naeem and Ibrahim Alabdulmohsin and Nikhil Parthasarathy and Talfan Evans and Lucas Beyer and Ye Xia and Basil Mustafa and Olivier Hénaff and Jeremiah Harmsen and Andreas Steiner and Xiaohua Zhai},
      year={2025},
      eprint={2502.14786},
      archivePrefix={arXiv},
      primaryClass={cs.CV},
      url={https://arxiv.org/abs/2502.14786}, 
}

Files

9 files · 4.58 GBWeights 4.54 GB (safetensors). Sizes and sha256 from the signed manifest.
Hide all 9 files with their sha256
FileSizesha256
.gitattributes1.57 KB34448b82c17d60fec9b65b1f093c115ddbaadc04beb1b0140b6bfed2e012a930
README.md3.39 KB1104c24a1af2a8a496146c67581523661277883c8d02f022e216302d61bda49b
config.json590 Bc633ddede50ec15d5818e04325bc4a5ac47c2762194a02486baee7d2a3a3dbc5
model.safetensors4.54 GB11a61a2068800d5f4f35cb041c1fea25de86ce87725e4c97a9ed046d0b22c076
preprocessor_config.json393 B1125703e5446d5b6ff4d5893a33bac128cdd21dc12e3dad2469a648fb0ae3bf7
special_tokens_map.json636 Bbaec30ea10906f16adb8c18af7a34023002c1746542612b8b41c9f09e1351351
tokenizer.json34.4 MB58a1696e79c9d97937389ed116f552a15c84811d7b8023918b86f4bc5775b1b0
tokenizer.model4.24 MB61a7b147390c64585d6c3543dd6fc636906c9af3865a5548f27f31aee1d4c8e2
tokenizer_config.json40.2 KBd2343400f0f86133053325951b696df8fd0f53a007cf6a546e6c2b4361344f47
VersionsEach time the pinned upstream commit or file list changed in this repo. Newest first.
Upstream commitDateContents
cc24074f71 pinned now manifest updated, same commit2026-11-14 21:37 UTC9 files · 4.58 GB
cc24074f712026-11-14 21:37 UTC9 files · 4.58 GB

Use it

$ fw get google/siglip2-so400m-patch16-naflex
# manifest sha256 c0cc09828c5c… · 4.58 GB · 9 files
$ fw verify ./siglip2-so400m-patch16-naflex google/siglip2-so400m-patch16-naflex
fw.pyChecks the signature and every sha256, tries each source in order, resumes.
$ python3 fw.py get https://freeweights.allternit.com/manifests/google/siglip2-so400m-patch16-naflex.json --dir ./siglip2-so400m-patch16-naflex $ python3 fw.py verify ./siglip2-so400m-patch16-naflex ./google__siglip2-so400m-patch16-naflex.json
hfThe Hugging Face CLI with one setting. Same repo id.
$ HF_ENDPOINT=https://freeweights.allternit.com hf download google/siglip2-so400m-patch16-naflex --revision cc24074f717b612951c2dead130904ab9b65a81e --local-dir ./siglip2-so400m-patch16-naflex

License

Name
Apache License 2.0
Id
Apache-2.0
Class
Permissive
Redistribution
yes
Listing
Hosted (signed)
Decided
License as declared by the publisher. No person read it. 2026-11-14
Text in
README.md
Text sha256
1104c24a1af2a8a496146c67581523661277883c8d02f022e216302d61bda49b
Terms gate
No extra terms beyond the license.

Read the license text

Licenses are checked against the license table. A custom license passes only after a person reads it.

Provenance

From: google <huggingface.co/google>Newsgroups: alt.freeweights.visionSubject: siglip2-so400m-patch16-naflexDate: 2026-11-14Commit: cc24074Signed: 2DC28CC7B26A283B ✓
Upstream
google/siglip2-so400m-patch16-naflex
Pinned commit
cc24074f717b612951c2dead130904ab9b65a81e
Manifest
siglip2-so400m-patch16-naflex.json · .minisig
Manifest sha256
c0cc09828c5cbf9a36f0b2bc33235b8e37a61c58e4bb86a18ae20308a8a4a9e8
Signature
minisign, Ed25519, key 2DC28CC7B26A283B
Created
2026-11-14 21:37 UTC
Generator
freeweights-manifest/0.1.0
Takedowns
None.

How to verify

$ curl -O https://freeweights.allternit.com/manifests/google/siglip2-so400m-patch16-naflex.json $ curl -O https://freeweights.allternit.com/manifests/google/siglip2-so400m-patch16-naflex.json.minisig $ minisign -Vm siglip2-so400m-patch16-naflex.json -P RWQ7KGqyx4zCLXtUFOqvfv8L3g+8fpKJ1FsuxPyOYMF+4KufbUxKq1Oq $ shasum -a 256 <file> # compare with the Files tab

A manifest whose signature fails must be rejected. A file whose size or sha256 does not match must be discarded. Verify a download

Model tree

No related models in this catalog.Nothing here lists this model as its parent, and it names no parent.
Get it
Download
$ HF_ENDPOINT=https://freeweights.allternit.com hf download google/siglip2-so400m-patch16-naflex
Open in Freeweights Studio

Pull, verify and run it in the Allternit app on Desktop, web or phone.

Signed manifest
minisign, key 2DC28CC7B26A283B. siglip2-so400m-patch16-naflex.json. Provenance. Takedown history: none.
From: dima806 <huggingface.co/dima806>Subject: ai_vs_real_image_detection
From: legekka <huggingface.co/legekka>Subject: AI-Anime-Image-Detector-ViT
From: onnx-community <huggingface.co/onnx-community>Subject: AI-Anime-Image-Detector-ViT-ONNX
From: AICodexLab <huggingface.co/AICodexLab>Subject: answerdotai-ModernBERT-base-ai-detector
From: onnx-community <huggingface.co/onnx-community>Subject: answerdotai-ModernBERT-base-ai-detector-ONNX
From: onnx-community <huggingface.co/onnx-community>Subject: bart-large-cnn-ONNX