Experiential

Cyber AI
for security teams.

Abliterated open models for authorized security work. One OpenAI-compatible API for your agents.

Safety training refuses valid work. Defenders ask what attackers ask.

Frontier models are trained to refuse anything that reads like an attack. You can't fix a vulnerability your model won't explain.

Web and API testing

Investigate injection flaws, authentication weaknesses and broken access controls. Turn suspected issues into concrete tests within your authorized scope.

Vulnerability reproduction

Work through exploit behavior in a controlled environment. Reproduce the finding, assess its impact and test the proposed fix.

Incident investigation

Make sense of suspicious activity and security logs. Connect findings to relevant vulnerabilities and work through containment and remediation options.

Security code review

Review authentication and other sensitive code paths. Investigate weaknesses, understand their implications and develop fixes you can validate.

Abliterated open models. Performance intact.

Abliteration removes the direction in the weights that produces refusals.

Before: the model refuses
After: refusals removed

GLM-5.3 Flash Uncensored

An abliterated GLM-5.3 Flash published by dealignai. It scores 87.3 on MMLU against 86.7 for the base.

DeepSeek V4.1 Flash Uncensored

An abliterated DeepSeek V4.1 Flash published by dealignai. We serve it behind the same API as every other model.

One API for the OpenAI SDK you already use.

Point the SDK at our base URL and change the model ID. Each agent can carry its own key and limits.

import os
from openai import OpenAI

client = OpenAI(
    base_url="https://api.experientiallabs.ai/v1",
    api_key=os.environ["EXPLABS_API_KEY"],
)
resp = client.chat.completions.create(
    model="glm-5.3-flash-uncensored",
    messages=[{"role": "user", "content": "Write a Sigma rule that flags a new local admin account on Windows."}],
)
print(resp.choices[0].message.content)

Kept for content moderation. Zero retention by approval.

Kept
Zero retention

Why we keep it

Refusal behavior is removed from these models. We keep every prompt and response so we can review them for content policy violations.

Zero retention by approval

Approved customers can run uncensored models with no prompts or responses stored. Billing metadata is still recorded. Email founders@experientiallabs.ai to request it.

What we don't allow

Requests involving child sexualization, violence, mass-casualty weapons, fraud or extortion. Flagged requests can suspend uncensored access.

How content can be used

Outside private mode captured content may be used to improve our services and the models we host. A signed agreement governs where it conflicts.

Running security agents at volume

Committed pricing for teams running agents around the clock.

Book a call

Questions about cyber work on the gateway.

Why do security teams need uncensored models?

Safety training teaches models to refuse anything that reads like an attack. Defensive work reads like an attack all the time. Fixing a vulnerability starts with proving it is real and writing a detection starts with describing the attack. Our uncensored models have that refusal behavior removed and our terms apply to every request.

Who can use the cyber models?

Anyone with an account outside countries under comprehensive sanctions, which today are Iran, North Korea, Cuba, Syria, Russia and Belarus. Our terms apply to every request. If flagged requests suspend access a short KYC review restores it.

Which uncensored models can I call?

We lead with GLM-5.3 Flash Uncensored (glm-5.3-flash-uncensored) and DeepSeek V4.1 Flash Uncensored (deepseek-v4.1-flash-uncensored). Both are abliterated so no special prompt is needed. Every uncensored model carries the Uncensored mark in the catalog and uses the same OpenAI-compatible endpoint.

What isn't allowed on the uncensored models?

Requests involving child sexualization, violence, mass-casualty weapons, fraud or extortion. We review content against this policy and flagged requests can suspend uncensored access for your organization. A short KYC review restores it.

Do you keep my prompts?

Yes. We keep every prompt and response sent to an uncensored model for content moderation. Approved customers can run uncensored models with no prompts or responses stored.

Point your security agents at an uncensored API. Pay per token.