Best Models for Cyber Security

    Models for code audits, log triage, threat modelling, CTFs, and sandboxed malware analysis — compared by price, context window, and whether they finish the task

    Compare
    Use Case
    Lounge Plan
    Capabilities
    Provider
    Status
    Input Price ($/M tokens)
    Output Price ($/M tokens)
    Context Size (tokens)
    22/290
    Models
    32/66
    Providers
    18
    Vision Models (filtered)
    22
    Tool-enabled (filtered)
    0
    Free Models (filtered)
    Features
    Moonshot AI
    kimi-k3.1-pro
    		$2.00$10.00$0.20
    Alibaba Cloud
    deepseek-v4.1-flash-1017
    		$0.30$1.20$0.03
    DeepInfra
    deepseek-v4.1-flash-1017
    		$0.20$0.60$0.01
    DeepSeek
    deepseek-v4.1-flash-1017
    		$0.15$0.60$0.00
    Entrim
    deepseek-v4.1-flash-1017
    $0.20$0.18
    -10% off
    $0.80$0.72
    -10% off
    $0.01$0.00
    -10% off
    Inference.net
    deepseek-v4.1-flash-1017
    		$0.30$1.00$0.01
    NovitaAI
    deepseek-v4.1-flash-1017
    		$0.30$1.20$0.01
    Reka AI
    deepseek-v4.1-flash-1017
    		$0.15$0.60$0.00
    Runware
    deepseek-v4.1-flash-1017
    		$0.15$0.60$0.01
    Together AI
    deepseek-v4.1-flash-1017
    		$0.30$1.20$0.01
    Anthropic
    claude-haiku-5-5
    		$0.10$0.50$0.01
    AWS Bedrock
    claude-haiku-5-5
    		$0.10$0.50$0.01
    AWS Bedrock(eu)
    claude-haiku-5-5
    		$0.11$0.55$0.01
    AWS Bedrock(global)
    claude-haiku-5-5
    		$0.10$0.50$0.01
    AWS Bedrock(us)
    claude-haiku-5-5
    		$0.11$0.55$0.01
    Anthropic
    claude-sonnet-5-5
    		$2.00$10.00$0.10
    AWS Bedrock
    claude-sonnet-5-5
    		$2.00$10.00$0.10
    AWS Bedrock(eu)
    claude-sonnet-5-5
    		$2.20$11.00$0.11
    AWS Bedrock(global)
    claude-sonnet-5-5
    		$2.00$10.00$0.10
    AWS Bedrock(us)
    claude-sonnet-5-5
    		$2.20$11.00$0.11
    Azure Anthropic
    claude-sonnet-5-5
    		$2.00$10.00$0.10
    Azure
    gpt-6-sol
    		$2.00$10.00$0.20
    OpenAI
    gpt-6-sol
    		$2.00$10.00$0.20
    DeepInfra
    mimo-v2.6-pro
    		$0.43$0.87$0.00
    Xiaomi
    mimo-v2.6-pro
    		$0.43$0.87$0.00
    Alibaba Cloud
    deepseek-v4.1-flash
    		$0.30$1.20$0.03
    Alibaba Cloud(cn-beijing)
    deepseek-v4.1-flash
    		$0.28$1.13$0.03
    Alibaba Cloud(eu-frankfurt)
    deepseek-v4.1-flash
    		$0.28$1.13$0.03
    Alibaba Cloud(singapore)
    deepseek-v4.1-flash
    		$0.30$1.20$0.03
    Alibaba Cloud(us-virginia)
    deepseek-v4.1-flash
    		$0.28$1.13$0.03
    Baidu
    deepseek-v4.1-flash
    		$0.30$1.20$0.01
    Consensus Protocol
    deepseek-v4.1-flash
    		$0.15$0.55$0.01
    DeepInfra
    deepseek-v4.1-flash
    		$0.20$0.60$0.01
    Entrim
    deepseek-v4.1-flash
    $0.20$0.10
    -50% off
    $0.60$0.30
    -50% off
    $0.01$0.00
    -50% off
    Fireworks AI
    deepseek-v4.1-flash
    		$0.22$0.66$0.01
    Luminal
    deepseek-v4.1-flash
    		$0.14$0.54$0.00
    NovitaAI
    deepseek-v4.1-flash
    		$0.30$1.20$0.01
    Reka AI
    deepseek-v4.1-flash
    		$0.10$0.30$0.00
    Runware
    deepseek-v4.1-flash
    		$0.15$0.60$0.01
    SCX.ai
    deepseek-v4.1-flash
    		$0.15$0.60$0.01
    Together AI
    deepseek-v4.1-flash
    		$0.30$1.20$0.01
    Alibaba Cloud
    kimi-k3
    		$3.00$15.00$0.30
    Alibaba Cloud(cn-beijing)
    kimi-k3
    		$2.83$14.13$0.28
    Alibaba Cloud(eu-frankfurt)
    kimi-k3
    		$2.83$14.13$0.28
    Alibaba Cloud(singapore)
    kimi-k3
    		$3.00$15.00$0.30
    Alibaba Cloud(us-virginia)
    kimi-k3
    		$2.83$14.13$0.28
    AWS Bedrock
    kimi-k3
    		$3.00$15.00$0.30
    AWS Bedrock(global)
    kimi-k3
    		$3.00$15.00$0.30
    AWS Bedrock(us)
    kimi-k3
    		$3.30$16.50$0.33
    CanopyWave
    kimi-k3
    		$3.00$15.00$0.30
    Page 1 of 3

    Newsletter

    Stay ahead of the curve

    Insights on LLM routing, new model launches and cost optimization, sent to your inbox.

    • New models and providers, rounded up
    • Tips to cut LLM costs
    • Major product launches

    No spam. Unsubscribe anytime.

    System status
    AICPA SOC for Service Organizations badgeSOC 2 Type II
    compliant

    Product

  1. Features
  2. AI Gateway
  3. Observability
  4. Models
  5. Providers
  6. Rankings
  7. Add Provider
  8. Partners
  9. Lounge
  10. Changelog
  11. DevPass
  12. Compare Models
  13. Enterprise

    14. Resources

    • Legal Overview
    • Apps
    • Templates
    • Agents
    • MCP Server
    • Use Cases
    • Blog
    • Documentation
    • Developer resources
    • Integrations
    • Guides
    • Brand Assets
    • Token Cost Calculator
    • Copilot Cost Calculator
    • Referral Program
    • GitHub
    • Discord
    • Twitter
    • About
    • Contact Us

    Compliance

    • Trust Center
    • Security Portal
    • Terms
    • Privacy Policy
    • Provider Information
    • Sub-processors
    • SOC 2 Type II
    • Status

    Compare

    • All Comparisons
    • GitHub Copilot
    • OpenRouter
    • LiteLLM
    • Portkey
    • AWS Bedrock
    • Microsoft Foundry
    • Vercel AI Gateway
    • OpenRouter Alternatives
    • LiteLLM Alternatives
    • Migration Guides

    Models

    • Text Generation
    • Text to Image
    • Image to Image
    • Video Generation
    • Embeddings
    • Decisions
    • Vision
    • Reasoning
    • Tool Calling
    • Web Search
    • Discounted
    • Best for Roleplay
    • Best for Coding
    • Best for Creative Writing
    • Best for Translation
    • Best for Math
    • Best for Cyber Security
    • Best for Reverse Engineering
    • Long Context
    • Cheapest
    • Open Source

    Providers

    • OpenAI
    • Anthropic
    • Google AI Studio
    • Google Vertex AI
    • Vertex AI (OpenAI-compatible)
    • Vertex AI (Anthropic)
    • Groq
    • Cerebras
    • xAI
    • DeepSeek
    • Alibaba Cloud
    • Runpod
    • NovitaAI
    • AtlasCloud
    • AWS Bedrock
    • AWS Mantle
    • Azure
    • Azure AI Foundry
    • Azure Anthropic
    • Z AI
    • Moonshot AI
    • Baidu
    • Perplexity
    • Nebius AI
    • Mistral AI
    • CanopyWave
    • Inference.net
    • Together AI
    • SCX.ai (Turbo)
    • SCX.ai
    • ByteDance
    • MiniMax
    • EmberCloud
    • Meta
    • Meta Contributor
    • Sakana AI
    • Xiaomi
    • DeepInfra
    • ElevenLabs
    • Gonka24
    • Fireworks AI
    • RanoAI
    • Consensus Protocol
    • Tencent Cloud
    • TypeSafe AI

    © 2026 LLM Gateway. All rights reserved.

    Security work puts two different demands on a language model. Defensive tasks — auditing a pull request for injection bugs, triaging a day of logs, writing a threat model or a pentest report — reward raw reasoning and a long context window, and every frontier model handles them. Offensive-adjacent tasks — explaining a malware sample in a sandbox, solving a CTF, triaging a crash into an exploitability verdict — also need a model that keeps going. Since September 2026, Anthropic's Claude Opus 5.5 ships with cyber safeguards that can stop a response mid-answer, and Anthropic's own launch benchmarks note that cyber tasks the safeguards interrupted were completed by Claude Opus 4.8 instead. OpenAI and Google apply similar classifiers to GPT-5.5 and Gemini.

    This page lists both kinds of model. Frontier options like Claude Opus 4.8, GPT-5.5, and Gemini 3.1 Pro for defensive review where quality matters most, and models from Chinese labs — DeepSeek, Moonshot (Kimi), Z.ai (GLM), Alibaba (Qwen), MiniMax, and Xiaomi — that are served with no cyber-specific refusal layer and cost a fraction of the price. Every one of them is reachable through the same OpenAI-compatible endpoint with one API key, so an agent can run the first pass on DeepSeek V4.1 Flash and escalate to a frontier model for the final report. For binary and firmware analysis specifically, see the reverse engineering models page.

    Frequently asked questions

    What is the best AI model for cyber security?

    For defensive work — code review, log analysis, threat modelling, report writing — Claude Opus 4.8, GPT-5.5, and Gemini 3.1 Pro produce the most thorough results. For hands-on analysis of malware samples, CTF challenges, or crash triage, Chinese-lab models such as DeepSeek V4 Pro, Kimi K3.1 Pro, GLM-5.2, and Qwen3.7 Max are the reliable choice because they are not wrapped in a cyber-specific refusal layer and will finish the task.

    Why do Claude and GPT models refuse security tasks?

    Frontier labs run safety classifiers on cyber-adjacent prompts. Anthropic's Claude Opus 5.5 launch post states the model deploys with safeguards covering cybersecurity, and that when those safeguards intervened during benchmark testing the tasks were completed by Claude Opus 4.8. Since October 21, 2026, users on r/Claude have reported Opus 5.5 halting reverse-engineering requests mid-answer; Anthropic has not confirmed a change. Anthropic also runs a Cyber Verification Program that grants verified security practitioners wider access.

    Which models will not refuse malware analysis or CTF work?

    Models from Chinese labs served through API providers — DeepSeek V4 Pro and V4.1 Flash, Kimi K3.1 Pro and K2.7 Code, GLM-5.2, Qwen3.7 Max and Qwen3.7 Plus, MiniMax M3, and MiMo V2.6 Pro — carry no cyber-specific classifier and complete sandboxed malware analysis, CTF challenges, and exploit triage. All of them support tool calling, so they work inside agents that drive Ghidra, Hopper, or a sandbox through MCP. Stay within the law: analyse systems you own or are authorised to test.

    How much does an AI security review cost?

    A 2,000-line pull request is roughly 25,000 input tokens. Reviewing it on DeepSeek V4.1 Flash costs well under a cent; on Claude Opus 4.8 at $5 per million input tokens it is about 13 cents before output. For a daily log triage pipeline, route the bulk pass to a budget model and escalate only flagged findings to a frontier model — one API key covers both and every request is logged with its exact cost.

    • DevPass
    • Lounge
    • Models
    • Docs
    • Pricing
    • DevPass
    • Lounge
    • Pricing
    • Docs
    • Models
      • AI Gateway
      • DevPass
      • Lounge
      • Observability
      • Enterprise
      • Blog
      • Changelog
      • Integrations
      • Reliability
      • Features
      • Guardrails
      • Providers
      • Partners
      • Rankings
      • Apps
      • Models
      • Model Timeline
      • Compare
      • Token Cost Calculator
      • Referral Program
      • MCP Server
      • CLI
      • Agents
      • AI SDK Provider
      • Agent Skills
      • Templates
      • Guides
    Log InGet Started
    1.7k