OrcaRouter has released OrcaCyber Zero 1.5, a post-trained cybersecurity model designed for authorized vulnerability research, exploit development, and penetration testing. Serving as the successor to Zero 1.0, the new model features a 1M-token context window, native function calling, and structured outputs to help security teams handle large codebases and complex attack chains.
The model delivers strong vendor-reported performance across several benchmarks, achieving a 100% score on Cybench using unrestricted agent execution, 95.8% on a 24-task subset of CVE-Bench, 93.9% on HumanEval+, and 76.5% on SWE-bench Pro V2. Developers can access the model exclusively through the OrcaRouter hosted API via an OpenAI-compatible interface, priced at $3.00 per million input tokens and $7.50 per million output tokens. Access requires enrollment in the Security Research tier, which involves passing an engagement and accepted terms.
This release matters because it provides security teams and red teams with a high-context, cost-effective tool for automated vulnerability discovery and exploit reproduction, though all performance metrics remain self-reported by the vendor.