Show HN: We post-trained a model that pen tests instead of refusing

Re:Show HN: We post-trained a model that pen tests instead o... by dk189 on Saturday June 20, 2026 @03:34PM (#48612248)

You need both, scanning for your own code, pen testing to actually prove vulnerabilities, otherwise it can be very noisy and one of the things that most tools currently suffer from is they give you too many false positives. For the moment. The pen testing we gated it for now until we resolve the debate of safety.

[ Parent | on HN ]

Re:Show HN: We post-trained a model that pen tests instead o... by Catloafdev on Sunday June 21, 2026 @02:39PM (#48621418)

Oh I should have clarified, I meant 'in the context of releasing a public tool'

I get that both need to exist as tools. I just don't see any safe way of doing a truly public release of the offensive end of it, you'd need to coordinate with established entities somehow.

[ Parent | on HN ]