apex-flash-1

apex-flash-1 is an open-weight security research model published by Cantina Security on Hugging Face on 30 September 2026. It was developed with Yeta and released under the MIT licence. It is built for vulnerability research, reading code and testing exploits against a target.

Features

• Code reading: reads code during focused investigations.
• Tool use: uses tools while pursuing a possible exploit.
• Exploit verification: checks the effect of an exploit against a running target in an isolated environment.
• Base model: built by reinforcement-learning post-training of GLM-5.3-Flash, which is reported at about 321 billion parameters with 18 billion active.

Who it works with

The developers say it suits security teams that want to run a model on their own infrastructure for code review and penetration testing. The model card reports results on 60 tasks from 20 held-out cases, and those figures are Cantina's own.

Key facts

• Developer: Cantina Security, with Yeta
• Licence: MIT
• Context: about one million tokens in its configuration
• Published: 30 September 2026 on Hugging Face