Spearbit

Cantina 🪐 Verified account @cantinasecurity · Oct 19

we’ve been shipping! two weeks ago we announced our very first open-weights model: apex-flash-1, powered by the same security research behind Apex’s bug discoveries in Apple, Coinbase and many others.

on top of this, we've added several enhancements to make any security expert's life easier:

- now you can chat with Clarion to generate a security agent and write its skills. just tell it what you want it to do.
- Apex's Connection Panel makes getting started with your coding agent easier, as does finding scores for your policy.
- Clarion now categorizes results from Amazon Inspector that have the same fix, drastically reducing the amount of sorting you have to do.

check all updates: cantina.review/changelog

View quoted post on X

Cantina 🪐 Verified account @cantinasecurity · Sep 14

gg. we'll take the number 1 spot on @Hacker0x01's US leaderboard with our autonomous pentester. more than number 2, 3 and 4 combined.

View quoted post on X

Cantina 🪐 Verified account @cantinasecurity · Sep 11

Researchers, fresh bug bounty just landed

@tenbinlabs is building a tokenization protocol that brings assets and their underlying liquidity on-chain, starting with yield-bearing BRL and MXN, alongside commodities like gold. the core code is live for hunting on Cantina.

Who’s taking the first pass? Find a crit and receive up to $40,000 USDC: cantina.review/tenbin

View quoted post on X

Cantina 🪐 Verified account @cantinasecurity · Sep 1

We pointed Apex at Pathling, an open source FHIR server used in hospitals.

It discovered 5 high-severity findings and 6 public CVEs, one allowed a token limited to a single patient to access records that it should never have been able to reach.

None of them would fail a conformance test.

Building FHIR APIs for 2027? We'll check yours free: cantina.review/free-fhir-62ac…

View quoted post on X

Cantina 🪐 Verified account @cantinasecurity · Aug 25

Answering the question everyone wants to know: we pit Apex against @claudeai and @OpenAI's Codex on the same codebase. Who comes out on top?

Of all the issues they detected, 78.6% of Apex’s findings were confirmed in the final review. For Claude, this number was 28.6%, and for Codex, just 16.7%.

The full method & results: cantina.review/claude-code-a4…

View quoted post on X