> We are all just sitting ducks, until we have access to these models and enough tokens to pen test our systems.

You don't need SOTA models to pend test your systems.

With enough effort put into proper harnesses, you can use good open-weights models and achieve a lot.

You can also use coding agents to clear out technical debt, or improve the security architecture.

Don't let yourself get paralyzed by lack of access to the latest-and-greatest models.