AI models capable of finding vulnerabilities present a dual-use dilemma; while they aid defenders in proactive patching, they also lower the barrier for novice hackers to perform complex security audits. Researchers report that defensive models are sometimes 'nerfed' to mitigate risk, potentially hindering security professionals while unregulated open-weight models remain accessible to malicious actors.