Can an Open Model Do Security Research? Cantina’s apex-flash-1 Solves 40 of 60 Held-Out Bug Tasks

Cantina Security and Yeta Labs have released apex-flash-1, an open-weights model fine-tuned for vulnerability research using the GLM-5.3-Flash architecture. In testing, the model successfully identified 40 out of 60 held-out bug tasks. Because it is released under an MIT license, the model can be deployed locally on standard infrastructure, offering researchers an accessible tool for automated security analysis.