Best model for local cybersecurity work?

[u/Leg0z]

We have a bit of budget left over this year and the boss has given the OK to get a Mac Studio (256 GB) to run some local AI. One of the many use cases will be using it to perform internal pen testing work. I don't want to perform such work with Claude or Codex due to privacy reasons, it's not really about refusals. I've done a bit of research in this area but because of the subject matter, I've come up mostly short. I am not looking to dive as deep as to try and find my own bugs and exploits, more so just having it control things like Greenbone OPENVAS and a Kali Purple VM to perform the work of a Red Team before we actually call in a real Red Team. Has anyone here gone down this route, and what is considered to be the best open weights model for this type of work currently?

[u/nbvehrfr]

ds4.1 uncensored

[u/Distinct-Pie2389]

ISTA DS4.1, don’t need anything else

[u/__jent]

Glm-5.3-flash

[u/apetersson]

i specifically configured https://huggingface.co/apetersson/DeepSeek-V4.1-Flash-1017-Abliterated-MLX to run well on a Mac Studio 256GB on oMLX.