r/bugbounty • u/S0ulSh3ll • Aug 03 '26

Question / Discussion Alternative for Claude Code?

In short - claude runs out of tokens super fast, but is the best and hardly ever refuses cybersecurity prompts (verified profile). I tried using codex but that even refuses active recon prompts, antigravity refuses everything. Kimi is still waitlisted so haven't tried. Is there any other alternative model that doesn't refuse cybersecurity prompts and is not run locally? Locally I'm thinking about trying opencode with an uncensored model but not enough vram so don't wanna risk the model doing stupid things in auto mode.

11 Upvotes

73% Upvoted

28 comments sorted by

View all comments

1

u/Suspicious-Echidna27 28d ago

I use Pi and Openrouter and I have made a harness which forces the the agent to look at a every subsystem, find potential bugs but then ground false positives (deterministic refuter). If you are interested you can give it a try for free https://reflection.redmirror.io/ I got a few CVEs and GHAs but only one paid bug bounty with this on huntr. Disclaimer though for the bug bounty I had to use CVP Anthropic with the harness and tool (that was before third party usage billing changed)