Cantina's apex-flash-1 Solves 40 of 60 Held-Out Security Bug Tasks as Open Security Research Model

Cantina has released apex-flash-1, an open model specifically trained and evaluated on security research tasks, achieving a 40/60 score on a held-out benchmark of real bug-finding challenges. The model is positioned as a demonstration that open-weight models can perform meaningful vulnerability research — a domain previously assumed to require heavily restricted or proprietary systems. For security engineers, this opens the door to self-hosted, auditable AI tooling for bug hunting, code review, and vulnerability triage without routing sensitive codebases through external APIs. The 40/60 result is a concrete, task-grounded benchmark rather than a generic capability claim, making it easier to assess fit for specific use cases. Developers building security tooling should evaluate apex-flash-1 as a potential component in automated vulnerability discovery pipelines.