Developers have found application entry points and interface logic related to DeepSeek’s Cyber security models in the frontend code of the company’s official website, according to an Oct. 30 report by IT Home cited by ChainCatcher.
The application page route points to /usage/model-application and is controlled by a feature gate. Accounts without permission are redirected back to the usage page. The code also shows interfaces tied to Cyber Key creation and quota management.
Two model identifiers appear in the code
The model identifiers shown in the code are cyber-personal-v3 and cyber-enterprise-v4.
The personal version is intended for individual security practitioners and requires applicants to provide ID information and complete facial verification. The enterprise version is aimed at corporate entities and requires a business license and authorization letter in addition to real-name verification materials.
Code shows eligibility requirements and review flow
The shared requirements for both application channels are:
- the account has completed real-name verification and remains in normal standing;
- the registration location is mainland China and the account is linked to a mainland China mobile number;
- there have been no violations in the past 90 days.
The process shown in the code is to fill out an application form and submit it for review. After approval, a Cyber Key is created.
Entry remains hidden from the public menu
The entry does not currently appear in DeepSeek’s public menu and is still in gray testing. User feedback cited in the report said only accounts included in the gray rollout can see the related section on the usage page. When permission is enabled, the page shows a DeepSeek Flash Cyber dedicated API area.
As of the time of the report, DeepSeek had not released a formal announcement about the model. The information available so far comes from observations of the website’s JavaScript code and feedback from users included in the gray rollout.

