---
title: "Abliterated vs Uncensored vs Security-Tuned Models"
canonical: https://pentestllm.ai/abliterated-vs-uncensored
generated: 2026-11-12T07:16:42.702Z
source: https://pentestllm.ai/abliterated-vs-uncensored
base_url: https://api.pentestllm.ai/v1
---

![Rows of server cabinets in a data centre](https://pentestllm.ai/img/datacenter.webp)

## Four labels, side by side

- Abliterated: One direction is projected out of the existing weights. No training run. Voice and knowledge stay those of the base model.
- Uncensored fine-tune: The model is trained again on data with the refusals taken out. The refusal direction is still there; the model learned not to use it. Tone and style move with the data.
- Derestricted, heretic: Refusal removal with the side effects kept down, by restoring weight magnitudes or by searching the edit’s settings against measured drift.
- Security-tuned: A fine-tune on security material. The aim is competence in the field, and fewer refusals on its questions come with that.

## Method words and result words

Half the confusion comes from mixing two kinds of word. Abliterated, obliterated, heretic and derestricted describe how a build was made. Uncensored describes what it does, and says nothing about how. Behind an id that ends in uncensored there may be a fine-tune, a merge of several, or an abliteration its author did not label.

The gateway’s own tags reflect this. Nearly every build listed on this site carries the uncensored tag, as the umbrella. The abliterated tag marks the weight-edited ones and the security tag marks the security-tuned ones. So on this catalog the useful question is never abliterated or uncensored. It is which kind of uncensored build fits the job.

## How each one fails

- Abliterated: A few refusals survive, and a careless edit drifts from the base model on ordinary prompts. Quality depends on who made it.
- Uncensored fine-tune: The style can wander from the base, and how much it declines depends on the training data. There is no standard figure to compare.
- Security-tuned: Strong inside the field, and it can be narrower outside it than a general model of the same size.
- All of them: None is more accurate for answering more. A confident wrong answer is the common failure, and it needs a human check.

## Which to pick for security work

- Triage and CVE questions: Security-tuned. The vocabulary and the habits of the field are in the training. Send `auto/security` to start.
- Code review and tooling: An abliterated build of a strong coding base, because the base model’s coding behaviour carries over. See [uncensored coding AI](https://pentestllm.ai/uncensored-coding-ai).
- Reports and summaries: Either. An abliterated general model often writes cleaner prose; a security build gets the terminology right.
- Agent runs: Whichever kind takes tool calls on the build you choose. Check the model page first.
- CTF: Security-tuned for most categories. [Best LLM for CTF](https://pentestllm.ai/best-llm-for-ctf) goes through them.

## Testing the difference yourself

Every build answers the same endpoints on the same key, so comparing kinds is a loop over model ids with one prompt from your own work. Read the answers for two things: whether the build starts on the answer or on a caveat, and how far its voice sits from what you expect of the base model. A non-streamed response reports its charge in the `x-uplink-charge` header, so the same loop prices each kind on your input.

Prices follow the individual build, not the label. Two edits of one base model can sit far apart, which is why the table below is read live from the catalog on 2026-11-12 and no figure is typed here.

## What none of the labels change

Each label describes how often a model declines. None of them describes what you are allowed to do. The service is for lawful security work on systems you own or have written permission to test, and the [acceptable use policy](https://pentestllm.ai/acceptable-use) applies to every build in the same way. For the edit itself, read [what is abliteration](https://pentestllm.ai/what-is-abliteration). For the hosted list, see [abliterated models](https://pentestllm.ai/abliterated-models).

## 73 uncensored and abliterated builds, priced per token

Read from the live catalog on 2026-11-12. Prices are US dollars per million tokens, paid from a prepaid balance that starts at $10. The id `auto/security` has no price of its own: each request is billed at the build that answered.

| Build | Input | Output | Context |
| --- | --- | --- | --- |
| [GLM-5.3 Flash Uncensored](https://pentestllm.ai/models/glm-5.3-flash-uncensored) | $0.1053 | $0.3685 | not published |
| [GLM-5.3 Uncensored](https://pentestllm.ai/models/glm-5.3-uncensored) | $0.282 | $0.846 | not published |
| [GLM-4.7 Flash Heretic](https://pentestllm.ai/models/glm-4.7-flash-heretic) | $0.336 | $1.92 | 131,072 |
| [GLM-5.3 Flash Abliterated](https://pentestllm.ai/models/glm-5.3-flash-abliterated) | $0.4656 | $1.94 | not published |
| [Deepseek V4.1 Flash Uncensored](https://pentestllm.ai/models/deepseek-v4.1-flash-uncensored) | $0.5412 | $2.5882 | 1,000,000 |
| [Qwen3.8 27B Obliterated](https://pentestllm.ai/models/qwen3.8-27b-obliterated) | $0.582 | $7.27 | 524,288 |
| [Gemma 4 26B-A4B Uncensored](https://pentestllm.ai/models/gemma-4-26b-a4b-uncensored) | $0.60 | $2.80 | 32,768 |
| [Apex Flash 1 Abliterated](https://pentestllm.ai/models/apex-flash-1-abliterated) | $0.68 | $2.32 | 262,144 |
| [DeepSeek V4.1 Flash 1017 Abliterated](https://pentestllm.ai/models/deepseek-v4.1-flash-1017-abliterated) | $0.75 | $3.125 | 1,000,000 |
| [SuperGemma 4 26B Uncensored](https://pentestllm.ai/models/supergemma4-26b-uncensored) | $0.78 | $2.40 | 256,000 |
| [GLM-5.3 Flash Apex Abliterated](https://pentestllm.ai/models/glm-5.3-flash-apex-abliterated) | $0.80 | $3.20 | 1,048,576 |
| [DeepSeek V4.1 Flash 0910 Uncensored](https://pentestllm.ai/models/deepseek-v4.1-flash-0910-uncensored) | $0.825 | $3.30 | 524,288 |
| [DeepSeek V4.1 Flash 0910 Uncensored Thinking](https://pentestllm.ai/models/deepseek-v4.1-flash-0910-uncensored-thinking) | $0.825 | $3.30 | 524,288 |
| [DeepSeek V4.1 Flash 1017 Uncensored](https://pentestllm.ai/models/deepseek-v4.1-flash-1017-uncensored) | $0.825 | $3.30 | 1,048,576 |
| [DeepSeek V4.1 Flash 1017 Uncensored Thinking](https://pentestllm.ai/models/deepseek-v4.1-flash-1017-uncensored-thinking) | $0.825 | $3.30 | 1,048,576 |
| [DeepSeek V4.1 Flash Uncensored Thinking](https://pentestllm.ai/models/deepseek-v4.1-flash-uncensored-thinking) | $0.825 | $3.30 | 1,048,576 |
| [DeepSeek V4.1 Flash 1017 Heretic](https://pentestllm.ai/models/deepseek-v4.1-flash-1017-heretic-uncensored) | $0.825 | $3.30 | 512,000 |
| [DeepSeek V4.1 Flash 1017 Heretic Thinking](https://pentestllm.ai/models/deepseek-v4.1-flash-1017-heretic-uncensored-thinking) | $0.825 | $3.30 | 512,000 |
| [DeepSeek V4.1 Flash Abliterated](https://pentestllm.ai/models/deepseek-v4.1-flash-abliterated) | $0.8488 | $1.6975 | not published |
| [Uncensored Coding Agent](https://pentestllm.ai/models/uncensored-coding-agent) | $0.90 | $3.00 | 1,048,576 |
| [DeepSeek V4 Pro Uncensored](https://pentestllm.ai/models/deepseek-v4-pro-uncensored) | $0.97 | $1.94 | not published |
| [DeepSeek V4 Pro Abliterated](https://pentestllm.ai/models/deepseek-v4-pro-abliterated) | $1.00 | $4.00 | 1,000,000 |
| [Qwen3.8 Max Uncensored](https://pentestllm.ai/models/qwen3.8-max-uncensored) | $1.00 | $3.00 | 991,000 |
| [Qwen3.8 27B Abliterated](https://pentestllm.ai/models/qwen3.8-27b-abliterated) | $1.0037 | $4.5326 | 262,000 |
| [Qwen3.5 27B Blossom V6.4 Derestricted](https://pentestllm.ai/models/qwen3.5-27b-blossom-v6.4-derestricted) | $1.071 | $1.071 | 262,144 |
| [Qwen3.5 27B BlueStar v3 Derestricted](https://pentestllm.ai/models/qwen3.5-27b-bluestar-v3-derestricted) | $1.071 | $1.071 | 262,144 |
| [Qwen3.5 27B Claude 4.6 Opus Reasoning Distilled Derestricted](https://pentestllm.ai/models/qwen3.5-27b-claude-4.6-opus-distilled-derestricted) | $1.071 | $1.071 | 262,144 |
| [Qwen3.5 27B Claude 4.6 Opus Reasoning Distilled Derestricted Lite](https://pentestllm.ai/models/qwen3.5-27b-claude-4.6-opus-distilled-derestricted-lite) | $1.071 | $1.071 | 262,144 |
| [Qwen3.5 27B Queen Derestricted](https://pentestllm.ai/models/qwen3.5-27b-queen-derestricted) | $1.071 | $1.071 | 262,144 |
| [DeepSeek V4 Pro Qwen3.5 9B Uncensored Heretic](https://pentestllm.ai/models/deepseek-v4-pro-qwen3.5-9b-uncensored-heretic) | $1.12 | $1.12 | 32,768 |
| [Nemotron 3 Ultra 550B Uncensored](https://pentestllm.ai/models/nemotron-3-ultra-550b-a55b-uncensored) | $1.125 | $6.60 | 262,144 |
| [Kimi K2.6 Uncensored](https://pentestllm.ai/models/kimi-k2.6-uncensored) | $1.17 | $7.34 | 262,144 |
| [Kimi K3.1 Pro Uncensored](https://pentestllm.ai/models/kimi-k3.1-pro-uncensored) | $1.20 | $6.00 | 1,048,576 |
| [Qwen3.8 27B Uncensored](https://pentestllm.ai/models/qwen3.8-27b-uncensored) | $1.2125 | $3.6375 | 32,768 |
| [MiMo V2.6 Flash Uncensored Thinking](https://pentestllm.ai/models/mimo-v2.6-flash-uncensored-thinking) | $1.25 | $3.75 | 1,048,576 |
| [GLM-4.6 Derestricted v5](https://pentestllm.ai/models/glm-4.6-derestricted-v5) | $1.40 | $5.25 | 131,072 |
| [Gemma 31B Heretic Uncensored](https://pentestllm.ai/models/gemma-31b-heretic-uncensored) | $1.50 | $8.25 | not published |
| [MiMo V2.6 Pro Uncensored](https://pentestllm.ai/models/mimo-v2.6-pro-uncensored) | $1.5225 | $3.045 | 1,048,576 |
| [DeepSeek V4.1 Flash Abliterated Fast](https://pentestllm.ai/models/deepseek-v4.1-flash-abliterated-fast) | $1.75 | $3.50 | 1,000,000 |
| [Qwen 2.5 32B Abliterated](https://pentestllm.ai/models/qwen2.5-32b-abliterated) | $1.75 | $1.75 | 32,768 |
| [NeuralDaredevil 8B Abliterated](https://pentestllm.ai/models/neuraldaredevil-8b-abliterated) | $1.76 | $1.76 | 8,192 |
| [MiMo V2.6 Flash Abliterated](https://pentestllm.ai/models/mimo-v2.6-flash-abliterated) | $2.00 | $6.00 | 1,048,576 |
| [MiMo V2.6 Flash Uncensored](https://pentestllm.ai/models/mimo-v2.6-flash-uncensored) | $2.00 | $6.00 | 1,048,576 |
| [Inkling Uncensored](https://pentestllm.ai/models/inkling-uncensored) | $2.13 | $12.1403 | 262,144 |
| [GLM-5.3 Abliterated](https://pentestllm.ai/models/glm-5.3-abliterated) | $2.1825 | $4.365 | not published |
| [Gemma 4 31B Uncensored](https://pentestllm.ai/models/gemma-4-31b-uncensored) | $2.304 | $6.912 | 32,768 |
| [Abliterated Large Flash](https://pentestllm.ai/models/abliterated-model-large-flash) | $2.50 | $5.00 | 1,048,576 |
| [Abliterated Model](https://pentestllm.ai/models/abliterated-model) | $2.50 | $7.50 | 262,144 |
| [Qwen 3.8 27B Uncensored Fast](https://pentestllm.ai/models/qwen3.8-27b-uncensored-fast) | $2.50 | $7.50 | 524,288 |
| [Qwen 3.8 27B Uncensored Thinking](https://pentestllm.ai/models/qwen3.8-27b-uncensored-thinking) | $2.50 | $7.50 | 1,048,576 |
| [DeepSeek R1 Distill Llama 70B Abliterated](https://pentestllm.ai/models/deepseek-r1-distill-llama-70b-abliterated) | $2.80 | $2.80 | 16,384 |
| [Llama 3 70B Abliterated v3.5](https://pentestllm.ai/models/llama-3-70b-abliterated) | $2.80 | $2.80 | 8,192 |
| [Llama 3.3 70B Abliterated](https://pentestllm.ai/models/llama-3.3-70b-abliterated) | $2.80 | $2.80 | 32,768 |
| [DeepSeek R1 Distill Qwen 32B Abliterated](https://pentestllm.ai/models/deepseek-r1-distill-qwen-32b-abliterated) | $5.60 | $5.60 | 16,384 |
| [Kimi K3 Uncensored](https://pentestllm.ai/models/kimi-k3-uncensored) | $5.745 | $28.68 | 262,144 |
| [Uncensored AI Assistant](https://pentestllm.ai/models/uncensored-ai-assistant) | $5.85 | $7.80 | 196,608 |
| [Uncensored Chatbot](https://pentestllm.ai/models/uncensored-chatbot) | $5.85 | $7.80 | 196,608 |
| [GLM-5.3 Flash Code Uncensored](https://pentestllm.ai/models/glm-5.3-flash-code-uncensored) | $6.00 | $6.00 | not published |
| [Abliterated Model Large](https://pentestllm.ai/models/abliterated-model-large) | $7.50 | $12.50 | 1,000,000 |
| [Abliterated Model Large V2](https://pentestllm.ai/models/abliterated-model-large-v2) | $7.50 | $12.50 | 1,048,576 |
| [Uncensored AI Chat](https://pentestllm.ai/models/uncensored-ai-chat) | $11.70 | $15.60 | 196,608 |
| [Uncensored Code Assistant](https://pentestllm.ai/models/uncensored-code-assistant) | $11.70 | $15.60 | 131,072 |
| [Aion 3.5 Mini Uncensored](https://pentestllm.ai/models/aion-3.5-mini-uncensored) | $0.13 a request | flat | 262,144 |
| [Magistral Small Uncensored](https://pentestllm.ai/models/magistral-small-uncensored) | $0.005 a request | flat | not published |
| [Ministral 3 14B Instruct Uncensored](https://pentestllm.ai/models/ministral-3-14b-instruct-uncensored) | $0.005 a request | flat | not published |
| [Ministral 3 8B Instruct Uncensored](https://pentestllm.ai/models/ministral-3-8b-instruct-uncensored) | $0.005 a request | flat | 262,000 |
| [Mistral Large 2 Uncensored](https://pentestllm.ai/models/mistral-large-2-uncensored) | $0.005 a request | flat | 256,000 |
| [Mistral Large 3 Uncensored](https://pentestllm.ai/models/mistral-large-3-uncensored) | $0.09 a request | flat | 262,144 |
| [Qwen3 Coder Next Uncensored](https://pentestllm.ai/models/qwen3-coder-next-uncensored) | $0.005 a request | flat | 262,144 |
| [Qwen3 Next 80B-A3B Instruct Uncensored](https://pentestllm.ai/models/qwen3-next-80b-a3b-instruct-uncensored) | $0.005 a request | flat | 262,144 |
| [Qwen3 VL 235B-A22B Instruct Uncensored](https://pentestllm.ai/models/qwen3-vl-235b-a22b-instruct-uncensored) | $0.005 a request | flat | 262,144 |
| [Qwen3.5 397B-A17B Uncensored](https://pentestllm.ai/models/qwen3.5-397b-a17b-uncensored) | $0.09 a request | flat | 262,144 |
| [Qwen3.8 2.4T-A95B Uncensored](https://pentestllm.ai/models/qwen3.8-2.4t-a95b-uncensored) | $0.07 a request | flat | 1,048,576 |

[Full price list and tool fees](https://pentestllm.ai/pricing) · [Every model](https://pentestllm.ai/models) · [API docs](https://pentestllm.ai/docs)

## Questions

- No. Abliterated is a method: a weight edit that removes the refusal direction with no retraining. Uncensored is a result, and can describe an abliterated build, a fine-tune or a merge.
- It labels builds made with a norm-preserving form of abliteration that restores the original weight magnitudes after the refusal component is removed, to limit side effects.
- The gateway tags it abliterated. Heretic is an open-source tool that removes refusals by editing the weights without training, and tunes the edit against refusal rate and drift from the original.
- Start with a security-tuned build for testing questions, and use an abliterated build when the task is mostly coding or writing. Both are on the same key, so switching is one model id.
- No. Abliterated is the coined term and obliterated is the ordinary English word. Both name the same edit.
- No. Every kind reduces refusals, and none removes them completely.

## Read next

- [What is abliteration How the refusal direction is removed from a model’s weights, and what that changes in practice.](https://pentestllm.ai/what-is-abliteration)
- [Abliterated models Hosted abliterated builds by API, with no weights to download or GPU to rent.](https://pentestllm.ai/abliterated-models)
- [Uncensored LLM The uncensored and abliterated builds on one key, with live prices and context windows.](https://pentestllm.ai/uncensored-llm)
- [Jailbreak prompts vs abliterated models Why a build with fewer refusals is steadier than a jailbreak prompt for authorized testing.](https://pentestllm.ai/jailbreak-vs-abliterated)

## One key, from $10

PentestLLM is for systems you own or have written permission to test. The [acceptable use policy](https://pentestllm.ai/acceptable-use) says what is not allowed.

[Get a key](https://app.pentestllm.ai/console)

usage, 1,000 agent turns on Qwen3.8 27B Cybersecurity

- Input, 8,000 tokens at $0.40 per million: $0.0032
- Output, 1,000 tokens at $2.40 per million: $0.0024
- One turn: $0.0056
- 1,000 turns: $5.60

output price per million tokens, 9 builds

$1.3376 Gemma 4 26B A4B Cybersecurity OrcaCyber Zero 1.5 $18.75