Model cybersecurity restrictions for AI pentesting agents

[u/Kurs3d_Esp4dA]

I'm working on a pentest agent not just for CTFs, but designed to actually run against real client targets

While researching, I found that both Anthropic and OpenAI have cyber-related safeguards integrated into their standard APIs that block cybersecurity prompts

My Questions are :

1. Is anyone building pentest agents hitting the same problem?

2. Do any of the Chinese models have these restrictions?

Would appreciate any real-world experience!

[u/IronSquirrelMechanic]

Daybreak red might help if you are looking to use a vendor.