Open-weights security model apex-flash-1 lands $1M in bug bounties, tops HackerOne board
glenbeer · x · 2026-10-05
Cantina Security released apex-flash-1, its first open-weights model post-trained for cybersecurity on real, paid-for vulnerabilities, plus an abliterated variant for authorized research workflows.
Key claims from the release:
- The team has post-trained models from 27B to 1T+ parameters and frames scalable zero-day discovery as a money-printing capability
- They've earned $1 million across public bug bounty programs and rank #1 on the HackerOne US business leaderboard for 2026
- Payers include Apple, Anthropic, Datadog, Ripple, and Coinbase
- A year of harness engineering produced offensive/defensive security harnesses processing trillions of tokens per month
More from Models
- Music producer: Suno is 'light years away' from musical AGI, moving backwards — teropa · 2026-10-05
- Prediction: Most technical users will soon be unable to tell frontier models from their distills — teortaxesTex · 2026-10-05
- User reports GLM-5.3 randomly switches to Chinese and resists instructions — khademinori · 2026-10-05
- Grok 4.7 arrives on Amazon Bedrock and Google's enterprise agent platform — tetsuoai · 2026-10-05
- xAI retires grok-voice-transcribe-1.0, silently reroutes requests to 2.0 at same price — tetsuoai · 2026-10-05
- Cursor CEO:前沿模型在复杂任务上集体表现相似且挣扎 — zeeg · 2026-10-05