OrcaRouter launches orcacyber zero 1.5, a cybersecurity model for vulnerability research

OrcaRouter has launched OrcaCyber Zero 1.5, a cybersecurity model for authorized vulnerability research. It succeeds OrcaCyber Zero 1.0, released on September 17, 2026. OrcaCyber Zero 1.5 focuses on vulnerability reproduction, exploit development, and penetration testing. It features a 1M-token context window, native function calling, and structured outputs. The model aims to reduce report volume while increasing validated and fixed vulnerabilities. OrcaRouter reports it covers 95.8% of a 24-task subset of CVE-Bench, based on 40 critical-severity web CVEs. It also performs well on Cybench, covering 39 of 40 CTF tasks. OrcaRouter notes all competitor figures are self-reported and not independently verified. OrcaCyber Zero 1.5 is available via an OpenAI-compatible API, restricted to the Security Research tier. Pricing is $3.00 per 1M input tokens, $7.50 per 1M output tokens, and $0.75 per 1M cache reads. Latency metrics show a p50 time-to-first-token of 500 ms and a p95 of 2.36 seconds, based on a 1.3K token sample. OrcaRouter states these figures are not directly comparable to previous performance metrics.