<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Valentin Monteiro</title>
    <description>The latest articles on Forem by Valentin Monteiro (@valentin_monteiro).</description>
    <link>https://forem.com/valentin_monteiro</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3831601%2F9ddfb180-fe4d-4ff2-8a06-ad5f1511bb3f.jpg</url>
      <title>Forem: Valentin Monteiro</title>
      <link>https://forem.com/valentin_monteiro</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/valentin_monteiro"/>
    <language>en</language>
    <item>
      <title>Claude Expert: The 4 Official (Free) Anthropic Courses</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Tue, 21 Apr 2026 11:44:08 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/claude-expert-the-4-official-free-anthropic-courses-4k89</link>
      <guid>https://forem.com/valentin_monteiro/claude-expert-the-4-official-free-anthropic-courses-4k89</guid>
      <description>&lt;p&gt;On LinkedIn, everyone's an "AI expert". Three ChatGPT prompts, a 12-hour bootcamp, a blue badge, done. In reality, almost no one has taken the official Claude courses Anthropic published. They exist. They're free. And they're the only source that actually counts.&lt;/p&gt;

&lt;h2&gt;
  
  
  "Using Claude" is not "being a Claude expert"
&lt;/h2&gt;

&lt;p&gt;Using Claude means opening a conversation and asking a question. Plenty of people do it well. Few understand what's happening underneath.&lt;/p&gt;

&lt;p&gt;A Claude expert understands something else. How the API is structured. What an Agent Skill is and when to write one. How the Model Context Protocol connects Claude to an existing system. What Claude Code changes when you move from chat to actual software engineering.&lt;/p&gt;

&lt;p&gt;This isn't extra theory. It's the difference between "I prompt well" and "I build products with Claude". The four courses below cover exactly that ground. They aren't optional if the phrase "Claude expert" is supposed to mean anything.&lt;/p&gt;

&lt;h2&gt;
  
  
  How to become a Claude expert
&lt;/h2&gt;

&lt;p&gt;Short answer: by taking the 4 official courses Anthropic put on Skilljar for free. &lt;em&gt;Claude with the Anthropic API&lt;/em&gt;, &lt;em&gt;Introduction to Agent Skills&lt;/em&gt;, &lt;em&gt;Introduction to Model Context Protocol&lt;/em&gt;, &lt;em&gt;Claude Code in Action&lt;/em&gt;. Around ten hours total.&lt;/p&gt;

&lt;p&gt;Long answer: the rest of this article. But the path fits in four modules, nothing else gets you to that level of mastery that fast, and all of it is free.&lt;/p&gt;

&lt;h2&gt;
  
  
  Prerequisites before starting
&lt;/h2&gt;

&lt;p&gt;These courses are free, not beginner-proof. You need a baseline for the time invested to pay off:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;
&lt;strong&gt;Reading and passive listening English.&lt;/strong&gt; Videos are in English on YouTube, with English subtitles available. No official dub.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;At least one programming language under your belt&lt;/strong&gt; (Python, JS, PHP, VBA, whatever). You can start from zero, but plan 2 to 3 hours of Python basics with Claude as your tutor before attacking the API module, otherwise frustration hits fast.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;An Anthropic API account.&lt;/strong&gt; Free to create, pay-as-you-go (a few cents per test). You need it to practice what you learn.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Minimum terminal comfort.&lt;/strong&gt; Level: "I can run &lt;code&gt;git clone&lt;/code&gt; and execute a script". No DevOps chops needed.&lt;/li&gt;
&lt;/ol&gt;

&lt;h2&gt;
  
  
  The 4 official Anthropic courses
&lt;/h2&gt;

&lt;h3&gt;
  
  
  1. Introduction to Agent Skills
&lt;/h3&gt;

&lt;p&gt;Skills are the mechanism through which Claude learns to perform a precise task in a repeatable way. It's what you reach for when you want Claude to follow a method, not just deliver an answer. The course covers what a Skill is, how it's structured, and how to write one that actually holds up.&lt;/p&gt;

&lt;p&gt;Why it's in the foundation: most serious AI workflows end up being Skills. Without this, you rewrite the same prompt in every conversation.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://anthropic.skilljar.com/introduction-to-agent-skills" rel="nofollow noreferrer noopener"&gt;Introduction to Agent Skills →&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  2. Claude with the Anthropic API
&lt;/h3&gt;

&lt;p&gt;Leaving the chat interface. This is when Claude stops being a personal assistant and becomes a component in a product. The course covers the basics: API calls, message handling, streaming, tool use, caching. The core toolkit for integrating Claude into code that runs.&lt;/p&gt;

&lt;p&gt;Why it's in the foundation: without the API, Claude stays a chat. With the API, it becomes a brick you can drop into any stack.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://anthropic.skilljar.com/claude-with-the-anthropic-api" rel="nofollow noreferrer noopener"&gt;Claude with the Anthropic API →&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  3. Introduction to Model Context Protocol
&lt;/h3&gt;

&lt;p&gt;MCP is the standard Anthropic is pushing to connect Claude to external systems: a database, an internal tool, a third-party API. Instead of duct-taping custom integrations every time, you write an MCP server and Claude talks to your system.&lt;/p&gt;

&lt;p&gt;Why it's in the foundation: this is the layer that turns Claude from an assistant that answers into an agent that acts inside your environment. Ignoring MCP in 2026 means missing half of what Claude can actually do.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://anthropic.skilljar.com/introduction-to-model-context-protocol" rel="nofollow noreferrer noopener"&gt;Introduction to Model Context Protocol →&lt;/a&gt;&lt;/p&gt;

&lt;h3&gt;
  
  
  4. Claude Code in Action
&lt;/h3&gt;

&lt;p&gt;Claude Code isn't a VS Code extension that writes a function for you. It's a full dev agent that reads your repo, understands your stack, and modifies your code while making sure tests pass. This course shows how to actually use it, not as a gadget.&lt;/p&gt;

&lt;p&gt;Why it's in the foundation: if you're building with Claude, you're probably building with Claude Code. Knowing how to drive it is the difference between 2x and 10x productivity.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://anthropic.skilljar.com/claude-code-in-action" rel="nofollow noreferrer noopener"&gt;Claude Code in Action →&lt;/a&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What this foundation actually changes
&lt;/h2&gt;

&lt;p&gt;Before these four courses, you prompt. You iterate. You duct-tape. It works, but you're guessing a lot.&lt;/p&gt;

&lt;p&gt;After, you know why a given call fails, why one prompt costs ten times too much, why your agent "doesn't get it" when the real issue is how you handed it context. You stop fighting the tool. You stop selling vague "AI solutions". You build.&lt;/p&gt;

&lt;p&gt;That's exactly the foundation I work on as a &lt;a href="https://monteiro.consulting/en/claude-consultant" rel="noopener noreferrer"&gt;Claude consultant&lt;/a&gt;. Not a LinkedIn badge, not a 40-slide deck on AI transformation. The technical base Anthropic made freely available, that just needs someone willing to sit down and go through it.&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;The only certification that counts when it comes to Claude is the one delivered by the company that builds Claude.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;h2&gt;
  
  
  FAQ: becoming a Claude expert
&lt;/h2&gt;

&lt;h3&gt;
  
  
  How long does it take to complete the 4 courses?
&lt;/h3&gt;

&lt;p&gt;Around ten hours total. Spread over 2 to 3 weeks at one module per weekend, it's a comfortable pace that won't block your other projects.&lt;/p&gt;

&lt;h3&gt;
  
  
  Is there a certification at the end?
&lt;/h3&gt;

&lt;p&gt;Yes. Each module delivers a Skilljar completion certificate signed by Anthropic. It's not an academic degree, but it's an official signal that you completed the track. Worth displaying on your LinkedIn or CV if it helps.&lt;/p&gt;

&lt;h3&gt;
  
  
  What order should I take the 4 courses in?
&lt;/h3&gt;

&lt;p&gt;&lt;em&gt;Claude with the Anthropic API&lt;/em&gt; first (the technical foundation). Then &lt;em&gt;Introduction to Agent Skills&lt;/em&gt; (you build on top). Then &lt;em&gt;Introduction to Model Context Protocol&lt;/em&gt; (you extend). Finally &lt;em&gt;Claude Code in Action&lt;/em&gt; (you apply everything in a real dev workflow).&lt;/p&gt;

&lt;h3&gt;
  
  
  I have zero programming background, can I still follow?
&lt;/h3&gt;

&lt;p&gt;Yes, with a plan B. Start with &lt;em&gt;Agent Skills&lt;/em&gt; (no code required). Before attacking the API module, spend 2 to 3 hours on Python basics with Claude as your tutor. Free, immediate, and it unlocks the rest.&lt;/p&gt;

&lt;h3&gt;
  
  
  Should I take these courses if I'm already an advanced Claude user?
&lt;/h3&gt;

&lt;p&gt;If you haven't touched the API, written a Skill, built an MCP server, or used Claude Code in real conditions: yes. Being an advanced chat user and being a Claude expert are two different levels.&lt;/p&gt;

&lt;h2&gt;
  
  
  The truth is, most won't do it
&lt;/h2&gt;

&lt;p&gt;These four courses add up to maybe a dozen hours. They're free. They're official. And most "AI experts" on LinkedIn will never take them, because flashing a badge is faster than opening the docs.&lt;/p&gt;

&lt;p&gt;The ones who do stop being generic AI experts. They become Claude experts. Different thing.&lt;/p&gt;

</description>
      <category>ai</category>
      <category>claude</category>
      <category>anthropic</category>
      <category>learning</category>
    </item>
    <item>
      <title>I Applied to the Claude Partner Network as a Solo Consultant. Here's What Happened.</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Thu, 16 Apr 2026 18:26:42 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/i-applied-to-the-claude-partner-network-as-a-solo-consultant-heres-what-happened-506o</link>
      <guid>https://forem.com/valentin_monteiro/i-applied-to-the-claude-partner-network-as-a-solo-consultant-heres-what-happened-506o</guid>
      <description>&lt;blockquote&gt;
&lt;p&gt;No team, no big firm. I applied to Anthropic's partner program as a one-person consultancy. The admission was easy. What comes next is still a mystery.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;I spent weeks looking for a serious AI certification. Something official, backed by a provider that actually matters. I found courses, bootcamps, "AI for business" trainings with shiny PDFs. Zero certifications from the companies building the models.&lt;/p&gt;

&lt;p&gt;Then I found the Claude Partner Network.&lt;/p&gt;

&lt;p&gt;Why Anthropic&lt;br&gt;
I've been using Claude to build everything for months now. My website, my automation workflows, my client deliverables, this article. Not as a novelty. As the core tool I work with every day.&lt;/p&gt;

&lt;p&gt;Anthropic is leading the AI market right now. Not just in model quality, but in how they think about the technology. When I looked at partner programs across major AI providers, Anthropic's stood out because it wasn't a badge factory. It looked like an actual relationship.&lt;/p&gt;

&lt;p&gt;The thing is, almost nobody talks about it. Anthropic announced the Claude Partner Network, and then... silence. Very few posts, very few testimonials, very little public information about what the program actually involves. Try searching for it. You'll find the announcement and not much else.&lt;/p&gt;

&lt;p&gt;That opacity is part of why I'm writing this. Someone should document what the process actually looks like from the inside.&lt;/p&gt;

&lt;p&gt;The admission&lt;br&gt;
Here's the honest version: it wasn't complex.&lt;/p&gt;

&lt;p&gt;You go to the &lt;a href="https://partnerportal.anthropic.com/s/partner-registration" rel="noopener noreferrer"&gt;Partner Portal&lt;/a&gt;, you fill out a form, and you wait. I won't pretend there was a grueling multi-stage interview process. There wasn't.&lt;/p&gt;

&lt;p&gt;I applied as a solo consultant. No team of 50. No enterprise clients with six-figure contracts. Just a consultant who uses Claude every day and builds real things with it.&lt;/p&gt;

&lt;p&gt;I got in anyway.&lt;/p&gt;

&lt;p&gt;I don't know exactly what tipped the scale. Maybe it's the volume of work I do with Claude. Maybe it's the profile. Maybe they're casting a wide net at this stage. I genuinely don't know, and I won't speculate.&lt;/p&gt;

&lt;p&gt;What I know about the onboarding&lt;br&gt;
Not much. And I'm being honest about that.&lt;/p&gt;

&lt;p&gt;Last week I received an email outlining the first steps. The program asks you to get ten people through a Claude Partner Network training path. They also want you to list your active Anthropic engagements: customer work, co-sells in flight.&lt;/p&gt;

&lt;p&gt;When you're solo, "pick your ten" hits different. I don't have ten architects and delivery leads to send to training. That's a real tension I'll have to figure out, and I'll document how I navigate it.&lt;/p&gt;

&lt;p&gt;The rest is still opaque. I'm waiting for a follow-up email this week with the actual training path. The onboarding team explicitly held it back to give me a partner-specific starting point rather than a generic one. Which sounds promising, but I can't evaluate what I haven't seen yet.&lt;/p&gt;

&lt;p&gt;What's next&lt;br&gt;
This is Part 1. I haven't lived the onboarding. I haven't done the training. I don't know what the program delivers in practice.&lt;/p&gt;

&lt;p&gt;The next article comes when I have something real to report. Not before.&lt;/p&gt;

&lt;p&gt;If you want to know who's writing this, &lt;a href="https://monteiro.consulting/en/valentin-monteiro" rel="noopener noreferrer"&gt;here's my story&lt;/a&gt;.&lt;/p&gt;

</description>
      <category>ai</category>
      <category>claude</category>
      <category>freelance</category>
      <category>career</category>
    </item>
    <item>
      <title>I got tired of copy-pasting between Claude and Chrome.</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Fri, 10 Apr 2026 17:13:32 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/i-got-tired-of-copy-pasting-between-claude-and-chrome-175g</link>
      <guid>https://forem.com/valentin_monteiro/i-got-tired-of-copy-pasting-between-claude-and-chrome-175g</guid>
      <description>&lt;p&gt;My workflow looked like this: I'm building a webapp, I hit a bug. I open Chrome, inspect the page, take a screenshot. Switch to Claude, paste the screenshot, copy the console output, describe the context. Claude responds. I go back to Chrome to apply the suggestion. Repeat.&lt;/p&gt;

&lt;p&gt;The worst part was when I needed to create an API key in some third-party tool. Claude would give me approximate paths. "Go to Settings &amp;gt; API &amp;gt; Create Key." Except the real path was three clicks somewhere else. Same thing for setting up ads, webhooks, anything that involved navigating a web interface.&lt;/p&gt;

&lt;p&gt;The model was guessing. And I was the middleman between a blind AI and a browser that couldn't talk to it.&lt;/p&gt;

&lt;h2&gt;
  
  
  The actual problem
&lt;/h2&gt;

&lt;p&gt;AI models work blind when it comes to the web. They don't have access to the page. Not the DOM, not the console, not the network. They mentally reconstruct what you describe, then propose something plausible.&lt;/p&gt;

&lt;p&gt;Plausible, not correct. And the gap between the two costs you time.&lt;/p&gt;

&lt;p&gt;What was missing wasn't a better model. It was a bridge between the model and the browser.&lt;/p&gt;

&lt;h2&gt;
  
  
  What I built
&lt;/h2&gt;

&lt;p&gt;Eaight is a web browser (Chromium-based, built with Electron) that ships with a native MCP server. MCP is the protocol Claude Code uses to communicate with external tools.&lt;/p&gt;

&lt;p&gt;In practice, it means Claude sees what you see. In real time. The page DOM, text content, accessibility tree, network requests, console logs, cookies. All exposed as MCP resources the model can read without you copying anything.&lt;/p&gt;

&lt;p&gt;And it doesn't just watch. 18 automation tools give it hands: navigate, click, type, scroll, fill forms, execute JavaScript, take screenshots. Claude can go create its own API key in the interface, without me playing middleman.&lt;/p&gt;

&lt;h2&gt;
  
  
  How it connects
&lt;/h2&gt;

&lt;p&gt;Claude Code detects the browser automatically. A discovery file, a WebSocket, that's it. No manual configuration, no token to paste. You launch Eaight, you launch Claude Code, they find each other.&lt;/p&gt;

&lt;p&gt;For other CLIs (Codex, Gemini), a stdio bridge translates the requests. Same protocol, same result.&lt;/p&gt;

&lt;h2&gt;
  
  
  The timing
&lt;/h2&gt;

&lt;p&gt;I started building Eaight in December 2025. A few months later, Anthropic released their own browser extension for Claude. Is it frustrating? A little. But I'm not the only developer on the planet. When a problem is real, multiple people see it at the same time. It just confirms the need was there.&lt;/p&gt;

&lt;p&gt;And Eaight does things the extension doesn't: it's a full browser, not an extension. The MCP server runs inside the main process with direct access to tabs. No Chrome extension permission limitations.&lt;/p&gt;

&lt;h2&gt;
  
  
  What it changes
&lt;/h2&gt;

&lt;p&gt;No more screenshots to paste. No more console to copy. No more invented paths. Claude looks at the page, understands the structure, and acts on it. The copy-paste workflow is gone.&lt;/p&gt;

&lt;p&gt;The code is open source: &lt;a href="//github.com/monteiro-consulting/eaight"&gt;github.com/monteiro-consulting/eaight&lt;/a&gt;&lt;/p&gt;

</description>
      <category>ai</category>
      <category>claude</category>
    </item>
    <item>
      <title>Claude Mythos Finds Bugs Like a Senior Dev Finds Excuses to Skip Standup</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Wed, 08 Apr 2026 12:21:41 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/claude-mythos-finds-bugs-like-a-senior-dev-finds-excuses-to-skip-standup-4194</link>
      <guid>https://forem.com/valentin_monteiro/claude-mythos-finds-bugs-like-a-senior-dev-finds-excuses-to-skip-standup-4194</guid>
      <description>&lt;p&gt;A bug in OpenBSD. It had been there for 27 years. 27 years of code reviews, security audits, version updates. Nobody caught it. Another one in FFmpeg, 16 years old, after 5 million automated fuzzing iterations. Still standing.&lt;/p&gt;

&lt;p&gt;Then an AI model showed up, read the code, and found them. Without being told where to look.&lt;/p&gt;

&lt;p&gt;This is &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Project Glasswing&lt;/a&gt;. And it changes a few things.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Glasswing Found (and Nobody Else Did)
&lt;/h2&gt;

&lt;p&gt;Anthropic just published results from &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Claude Mythos Preview&lt;/a&gt;, a model specialized in vulnerability detection. The findings speak for themselves.&lt;/p&gt;

&lt;p&gt;A flaw in OpenBSD's TCP SACK implementation dating back to 1999. A signed integer overflow allowing remote denial-of-service. The kind of bug that survived hundreds of reviews, dozens of major releases, thousands of pairs of eyes. Still there.&lt;/p&gt;

&lt;p&gt;A defect in FFmpeg's H.264 decoder, 16 years old. A sentinel collision causing an out-of-bounds write. Automated tools never caught it. Not for lack of trying: &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;5 million fuzz tests&lt;/a&gt;. Zero results. Mythos found it by analyzing the code directly.&lt;/p&gt;

&lt;p&gt;It didn't stop there. The model chained multiple Linux kernel vulnerabilities to build a full privilege escalation path, defeating hardened protections: stack canaries, KASLR, W^X. Not an isolated flaw. A working attack chain.&lt;/p&gt;

&lt;p&gt;On FreeBSD, Mythos &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;autonomously identified and exploited&lt;/a&gt; a 17-year-old remote code execution vulnerability in the NFS service. Unauthenticated root access. Fully autonomous. No human steering.&lt;/p&gt;

&lt;p&gt;And then there's this: against Firefox 147, the model successfully developed JavaScript shell exploits &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;181 times&lt;/a&gt;. Claude Opus 4.6, the previous best model? Twice.&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;Bugs that survived decades of human review and millions of automated tests. And a model that digs them up on its own.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;The key word here is "on its own". Nobody told Mythos "look in this file" or "focus on this function". It went through the code, identified the flaws, and built the corresponding exploits. Black box testing, binary analysis, full pentesting. It even reverse-engineered closed-source browsers and operating systems to find vulnerabilities through &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;reconstructed source code analysis&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;The numbers are staggering. Anthropic reports &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;over 1,000 critical-severity vulnerabilities and thousands more high-severity bugs&lt;/a&gt; identified across every major operating system and every major web browser. Human validators reviewed 198 reports manually: &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;89% matched Claude's severity assessment exactly, 98% within one severity level&lt;/a&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Claude Mythos: Not a Chatbot, an Auditor
&lt;/h2&gt;

&lt;p&gt;The benchmarks are brutal.&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Benchmark&lt;/th&gt;
&lt;th&gt;Claude Opus 4.6&lt;/th&gt;
&lt;th&gt;Claude Mythos Preview&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;
&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;CyberGym&lt;/a&gt; (vuln reproduction)&lt;/td&gt;
&lt;td&gt;66.6%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;83.1%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;SWE-bench Verified&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;80.8%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;93.9%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;SWE-bench Pro&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;53.4%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;77.8%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Terminal-Bench 2.0&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;65.4%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;82.0%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;This isn't incremental improvement. On SWE-bench Pro, that's nearly +25 points. On CyberGym, +16.5 points. A generational leap, not a minor update.&lt;/p&gt;

&lt;p&gt;For context, &lt;a href="https://cyberscoop.com/project-glasswing-anthropic-ai-open-source-software-vulnerabilities/" rel="noopener noreferrer"&gt;CyberGym was developed at UC Berkeley&lt;/a&gt; to evaluate AI agents on real-world cybersecurity tasks in realistic environments. Not textbook capture-the-flag exercises. Scenarios modeled on actual enterprise security operations.&lt;/p&gt;

&lt;p&gt;And the detail that matters: Mythos doesn't just find known vulnerabilities. It discovers new ones. The model constructs sophisticated exploits autonomously: stack overflows, &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Return-Oriented Programming (ROP) chains with 20+ gadgets&lt;/a&gt;, JIT heap sprays with sandbox escapes, and privilege escalation through chaining 2 to 4 vulnerabilities together.&lt;/p&gt;

&lt;p&gt;Nicholas Carlini, a well-known security researcher, &lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;put it simply&lt;/a&gt;: "I've found more bugs in the last couple of weeks than I found in the rest of my life combined."&lt;/p&gt;

&lt;h2&gt;
  
  
  12 Companies, $100M, and a Clear Message
&lt;/h2&gt;

&lt;p&gt;Look at the &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;launch partners&lt;/a&gt;: AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, Linux Foundation, Microsoft, NVIDIA, Palo Alto Networks. And Anthropic.&lt;/p&gt;

&lt;p&gt;Companies that compete on pretty much everything. United around the same project. When Apple and Google sit at the same table, the topic is serious.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;Simon Willison noted&lt;/a&gt; one notable absence: OpenAI. Whether that's politics or timing, it's worth watching.&lt;/p&gt;

&lt;p&gt;Anthropic is putting &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$100M in Mythos Preview usage credits&lt;/a&gt; toward research. &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$2.5M for Alpha-Omega and OpenSSF&lt;/a&gt; through the Linux Foundation. &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$1.5M for the Apache Software Foundation&lt;/a&gt;. Beyond the 12 launch partners, &lt;a href="https://venturebeat.com/technology/anthropic-says-its-most-powerful-ai-cyber-model-is-too-dangerous-to-release" rel="noopener noreferrer"&gt;over 40 additional organizations&lt;/a&gt; maintaining critical software have been granted access.&lt;/p&gt;

&lt;p&gt;This isn't an empty press release. It's real funding for open source security.&lt;/p&gt;

&lt;p&gt;The reason for the urgency? The window between vulnerability discovery and exploitation has collapsed. What used to take months now happens in minutes with AI. Greg Kroah-Hartman, a senior Linux kernel maintainer, &lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;observed the shift firsthand&lt;/a&gt;: "Something happened a month ago, and the world switched. Now we have real reports." Security teams went from filtering AI-generated "slop" to dealing with genuinely sophisticated vulnerability findings overnight.&lt;/p&gt;

&lt;p&gt;If attackers have access to these capabilities (and they will), defense needs a head start. No choice.&lt;/p&gt;

&lt;h2&gt;
  
  
  Safety: Why You Can't Use Mythos (Yet)
&lt;/h2&gt;

&lt;p&gt;Anthropic was clear: &lt;a href="https://www.cnbc.com/2026/04/07/anthropic-claude-mythos-ai-hackers-cyberattacks.html" rel="noopener noreferrer"&gt;no general release planned&lt;/a&gt;. This is deliberate.&lt;/p&gt;

&lt;p&gt;The &lt;a href="https://www.anthropic.com/claude-mythos-preview-risk-report" rel="noopener noreferrer"&gt;system card&lt;/a&gt; details why. Over 99% of discovered vulnerabilities remain unpatched at time of publication. Releasing a model that can find and exploit them autonomously would be handing attackers a loaded weapon.&lt;/p&gt;

&lt;p&gt;Access goes through two channels:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;The &lt;strong&gt;&lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Claude for Open Source&lt;/a&gt;&lt;/strong&gt; program for eligible organizations&lt;/li&gt;
&lt;li&gt;A &lt;strong&gt;&lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Cyber Verification Program&lt;/a&gt;&lt;/strong&gt; for security professionals whose legitimate work is affected by safeguards&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Partners use Mythos exclusively for finding and fixing vulnerabilities in their own software or in open-source projects they maintain. All discovered vulnerabilities go through &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;coordinated disclosure&lt;/a&gt; with SHA-3 cryptographic commitments and a 90+45 day window. Professional human triagers validate findings before vendor notification to prevent maintainer flooding.&lt;/p&gt;

&lt;p&gt;Announced pricing for participants: &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$25/$125 per million input/output tokens&lt;/a&gt;, via Claude API, Amazon Bedrock, Google Cloud Vertex AI, and Microsoft Foundry.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;Simon Willison's take&lt;/a&gt;: "I can live with that." The security risks are credible. Giving trusted teams preparation time is justified.&lt;/p&gt;

&lt;h2&gt;
  
  
  What This Changes for Devs
&lt;/h2&gt;

&lt;p&gt;Even without direct access, the direction is set. What Mythos does today in preview, mainstream models will do tomorrow. That means:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Automated code auditing will become a standard.&lt;/strong&gt; Not a nice-to-have. A mandatory step in CI/CD, just like unit tests. If a model can find a 27-year-old bug in a few passes, the "we did a code review" excuse won't hold up anymore.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Supply chain security moves to the front.&lt;/strong&gt; Glasswing is already working on &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;update automation, supply chain security standards, and automated patching frameworks&lt;/a&gt;. Those dependencies nobody audits in your &lt;code&gt;package.json&lt;/code&gt;? That's becoming less and less acceptable.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Memory-safe languages won't save you either.&lt;/strong&gt; Mythos found a &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;guest-to-host memory corruption vulnerability in a virtual machine monitor written in a memory-safe language&lt;/a&gt;. Logic bugs don't care about your type system.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The uncomfortable question stays open.&lt;/strong&gt; If AI finds zero-days faster than any human, who gets there first? The defender who patches, or the attacker who exploits? Glasswing is a bet on defense. But it's a race, and it's only getting started.&lt;/p&gt;




&lt;h2&gt;
  
  
  Sources
&lt;/h2&gt;

&lt;h3&gt;
  
  
  Official Anthropic Resources
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Project Glasswing: Securing critical software for the AI era&lt;/a&gt; (Anthropic)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Claude Mythos Preview: Technical Report&lt;/a&gt; (Anthropic Red Team)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.anthropic.com/claude-mythos-preview-risk-report" rel="noopener noreferrer"&gt;Alignment Risk Update: Claude Mythos Preview&lt;/a&gt; (Anthropic System Card)&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Press Coverage
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://venturebeat.com/technology/anthropic-says-its-most-powerful-ai-cyber-model-is-too-dangerous-to-release" rel="noopener noreferrer"&gt;Anthropic says its most powerful AI cyber model is too dangerous to release publicly&lt;/a&gt; (VentureBeat)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://techcrunch.com/2026/04/07/anthropic-mythos-ai-model-preview-security/" rel="noopener noreferrer"&gt;Anthropic debuts preview of powerful new AI model Mythos in new cybersecurity initiative&lt;/a&gt; (TechCrunch)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.cnbc.com/2026/04/07/anthropic-claude-mythos-ai-hackers-cyberattacks.html" rel="noopener noreferrer"&gt;Anthropic limits Mythos AI rollout over fears hackers could use model for cyberattacks&lt;/a&gt; (CNBC)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://fortune.com/2026/04/07/anthropic-claude-mythos-model-project-glasswing-cybersecurity/" rel="noopener noreferrer"&gt;Anthropic is giving some firms early access to Claude Mythos to bolster cybersecurity defenses&lt;/a&gt; (Fortune)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.fastcompany.com/91523254/anthropic-will-use-its-biggest-baddest-ai-model-to-protect-against-cyberattacks" rel="noopener noreferrer"&gt;Anthropic will use its biggest, baddest AI model to protect against cyberattacks&lt;/a&gt; (Fast Company)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://cyberscoop.com/project-glasswing-anthropic-ai-open-source-software-vulnerabilities/" rel="noopener noreferrer"&gt;Tech giants launch AI-powered 'Project Glasswing' to identify critical software vulnerabilities&lt;/a&gt; (CyberScoop)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.tomshardware.com/tech-industry/artificial-intelligence/anthropics-latest-ai-model-identifies-thousands-of-zero-day-vulnerabilities-in-every-major-operating-system-and-every-major-web-browser-claude-mythos-preview-sparks-race-to-fix-critical-bugs-some-unpatched-for-decades" rel="noopener noreferrer"&gt;Anthropic's latest AI model identifies 'thousands of zero-day vulnerabilities'&lt;/a&gt; (Tom's Hardware)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.neowin.net/news/anthropic-just-unveiled-its-most-dangerous-ai-model-and-is-keeping-it-out-of-public-hands/" rel="noopener noreferrer"&gt;Anthropic just unveiled its most dangerous AI model&lt;/a&gt; (Neowin)&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Analysis &amp;amp; Commentary
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;Anthropic's Project Glasswing: restricting Claude Mythos to security researchers sounds necessary to me&lt;/a&gt; (Simon Willison)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.nxcode.io/resources/news/claude-mythos-benchmarks-93-swe-bench-every-record-broken-2026" rel="noopener noreferrer"&gt;Claude Mythos Benchmarks Explained: 93.9% SWE-bench &amp;amp; Every Record Broken&lt;/a&gt; (NxCode)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://kenhuangus.substack.com/p/what-is-inside-claude-mythos-preview" rel="noopener noreferrer"&gt;What Is Inside Claude Mythos Preview? Dissecting the System Card&lt;/a&gt; (Ken Huang)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.vellum.ai/blog/everything-you-need-to-know-about-claude-mythos" rel="noopener noreferrer"&gt;Everything You Need to Know About Claude Mythos&lt;/a&gt; (Vellum)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://news.ycombinator.com/item?id=47679258" rel="noopener noreferrer"&gt;Hacker News Discussion: System Card&lt;/a&gt; (Hacker News)&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>security</category>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Claude Mythos Finds Bugs Like a Senior Dev Finds Excuses to Skip Standup</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Wed, 08 Apr 2026 12:21:41 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/claude-mythos-finds-bugs-like-a-senior-dev-finds-excuses-to-skip-standup-2h07</link>
      <guid>https://forem.com/valentin_monteiro/claude-mythos-finds-bugs-like-a-senior-dev-finds-excuses-to-skip-standup-2h07</guid>
      <description>&lt;p&gt;A bug in OpenBSD. It had been there for 27 years. 27 years of code reviews, security audits, version updates. Nobody caught it. Another one in FFmpeg, 16 years old, after 5 million automated fuzzing iterations. Still standing.&lt;/p&gt;

&lt;p&gt;Then an AI model showed up, read the code, and found them. Without being told where to look.&lt;/p&gt;

&lt;p&gt;This is &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Project Glasswing&lt;/a&gt;. And it changes a few things.&lt;/p&gt;

&lt;h2&gt;
  
  
  What Glasswing Found (and Nobody Else Did)
&lt;/h2&gt;

&lt;p&gt;Anthropic just published results from &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Claude Mythos Preview&lt;/a&gt;, a model specialized in vulnerability detection. The findings speak for themselves.&lt;/p&gt;

&lt;p&gt;A flaw in OpenBSD's TCP SACK implementation dating back to 1999. A signed integer overflow allowing remote denial-of-service. The kind of bug that survived hundreds of reviews, dozens of major releases, thousands of pairs of eyes. Still there.&lt;/p&gt;

&lt;p&gt;A defect in FFmpeg's H.264 decoder, 16 years old. A sentinel collision causing an out-of-bounds write. Automated tools never caught it. Not for lack of trying: &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;5 million fuzz tests&lt;/a&gt;. Zero results. Mythos found it by analyzing the code directly.&lt;/p&gt;

&lt;p&gt;It didn't stop there. The model chained multiple Linux kernel vulnerabilities to build a full privilege escalation path, defeating hardened protections: stack canaries, KASLR, W^X. Not an isolated flaw. A working attack chain.&lt;/p&gt;

&lt;p&gt;On FreeBSD, Mythos &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;autonomously identified and exploited&lt;/a&gt; a 17-year-old remote code execution vulnerability in the NFS service. Unauthenticated root access. Fully autonomous. No human steering.&lt;/p&gt;

&lt;p&gt;And then there's this: against Firefox 147, the model successfully developed JavaScript shell exploits &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;181 times&lt;/a&gt;. Claude Opus 4.6, the previous best model? Twice.&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;Bugs that survived decades of human review and millions of automated tests. And a model that digs them up on its own.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;The key word here is "on its own". Nobody told Mythos "look in this file" or "focus on this function". It went through the code, identified the flaws, and built the corresponding exploits. Black box testing, binary analysis, full pentesting. It even reverse-engineered closed-source browsers and operating systems to find vulnerabilities through &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;reconstructed source code analysis&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;The numbers are staggering. Anthropic reports &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;over 1,000 critical-severity vulnerabilities and thousands more high-severity bugs&lt;/a&gt; identified across every major operating system and every major web browser. Human validators reviewed 198 reports manually: &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;89% matched Claude's severity assessment exactly, 98% within one severity level&lt;/a&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Claude Mythos: Not a Chatbot, an Auditor
&lt;/h2&gt;

&lt;p&gt;The benchmarks are brutal.&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Benchmark&lt;/th&gt;
&lt;th&gt;Claude Opus 4.6&lt;/th&gt;
&lt;th&gt;Claude Mythos Preview&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;
&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;CyberGym&lt;/a&gt; (vuln reproduction)&lt;/td&gt;
&lt;td&gt;66.6%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;83.1%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;SWE-bench Verified&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;80.8%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;93.9%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;SWE-bench Pro&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;53.4%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;77.8%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Terminal-Bench 2.0&lt;/a&gt;&lt;/td&gt;
&lt;td&gt;65.4%&lt;/td&gt;
&lt;td&gt;&lt;strong&gt;82.0%&lt;/strong&gt;&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;This isn't incremental improvement. On SWE-bench Pro, that's nearly +25 points. On CyberGym, +16.5 points. A generational leap, not a minor update.&lt;/p&gt;

&lt;p&gt;For context, &lt;a href="https://cyberscoop.com/project-glasswing-anthropic-ai-open-source-software-vulnerabilities/" rel="noopener noreferrer"&gt;CyberGym was developed at UC Berkeley&lt;/a&gt; to evaluate AI agents on real-world cybersecurity tasks in realistic environments. Not textbook capture-the-flag exercises. Scenarios modeled on actual enterprise security operations.&lt;/p&gt;

&lt;p&gt;And the detail that matters: Mythos doesn't just find known vulnerabilities. It discovers new ones. The model constructs sophisticated exploits autonomously: stack overflows, &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Return-Oriented Programming (ROP) chains with 20+ gadgets&lt;/a&gt;, JIT heap sprays with sandbox escapes, and privilege escalation through chaining 2 to 4 vulnerabilities together.&lt;/p&gt;

&lt;p&gt;Nicholas Carlini, a well-known security researcher, &lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;put it simply&lt;/a&gt;: "I've found more bugs in the last couple of weeks than I found in the rest of my life combined."&lt;/p&gt;

&lt;h2&gt;
  
  
  12 Companies, $100M, and a Clear Message
&lt;/h2&gt;

&lt;p&gt;Look at the &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;launch partners&lt;/a&gt;: AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, Linux Foundation, Microsoft, NVIDIA, Palo Alto Networks. And Anthropic.&lt;/p&gt;

&lt;p&gt;Companies that compete on pretty much everything. United around the same project. When Apple and Google sit at the same table, the topic is serious.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;Simon Willison noted&lt;/a&gt; one notable absence: OpenAI. Whether that's politics or timing, it's worth watching.&lt;/p&gt;

&lt;p&gt;Anthropic is putting &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$100M in Mythos Preview usage credits&lt;/a&gt; toward research. &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$2.5M for Alpha-Omega and OpenSSF&lt;/a&gt; through the Linux Foundation. &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$1.5M for the Apache Software Foundation&lt;/a&gt;. Beyond the 12 launch partners, &lt;a href="https://venturebeat.com/technology/anthropic-says-its-most-powerful-ai-cyber-model-is-too-dangerous-to-release" rel="noopener noreferrer"&gt;over 40 additional organizations&lt;/a&gt; maintaining critical software have been granted access.&lt;/p&gt;

&lt;p&gt;This isn't an empty press release. It's real funding for open source security.&lt;/p&gt;

&lt;p&gt;The reason for the urgency? The window between vulnerability discovery and exploitation has collapsed. What used to take months now happens in minutes with AI. Greg Kroah-Hartman, a senior Linux kernel maintainer, &lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;observed the shift firsthand&lt;/a&gt;: "Something happened a month ago, and the world switched. Now we have real reports." Security teams went from filtering AI-generated "slop" to dealing with genuinely sophisticated vulnerability findings overnight.&lt;/p&gt;

&lt;p&gt;If attackers have access to these capabilities (and they will), defense needs a head start. No choice.&lt;/p&gt;

&lt;h2&gt;
  
  
  Safety: Why You Can't Use Mythos (Yet)
&lt;/h2&gt;

&lt;p&gt;Anthropic was clear: &lt;a href="https://www.cnbc.com/2026/04/07/anthropic-claude-mythos-ai-hackers-cyberattacks.html" rel="noopener noreferrer"&gt;no general release planned&lt;/a&gt;. This is deliberate.&lt;/p&gt;

&lt;p&gt;The &lt;a href="https://www.anthropic.com/claude-mythos-preview-risk-report" rel="noopener noreferrer"&gt;system card&lt;/a&gt; details why. Over 99% of discovered vulnerabilities remain unpatched at time of publication. Releasing a model that can find and exploit them autonomously would be handing attackers a loaded weapon.&lt;/p&gt;

&lt;p&gt;Access goes through two channels:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;The &lt;strong&gt;&lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Claude for Open Source&lt;/a&gt;&lt;/strong&gt; program for eligible organizations&lt;/li&gt;
&lt;li&gt;A &lt;strong&gt;&lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Cyber Verification Program&lt;/a&gt;&lt;/strong&gt; for security professionals whose legitimate work is affected by safeguards&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Partners use Mythos exclusively for finding and fixing vulnerabilities in their own software or in open-source projects they maintain. All discovered vulnerabilities go through &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;coordinated disclosure&lt;/a&gt; with SHA-3 cryptographic commitments and a 90+45 day window. Professional human triagers validate findings before vendor notification to prevent maintainer flooding.&lt;/p&gt;

&lt;p&gt;Announced pricing for participants: &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;$25/$125 per million input/output tokens&lt;/a&gt;, via Claude API, Amazon Bedrock, Google Cloud Vertex AI, and Microsoft Foundry.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;Simon Willison's take&lt;/a&gt;: "I can live with that." The security risks are credible. Giving trusted teams preparation time is justified.&lt;/p&gt;

&lt;h2&gt;
  
  
  What This Changes for Devs
&lt;/h2&gt;

&lt;p&gt;Even without direct access, the direction is set. What Mythos does today in preview, mainstream models will do tomorrow. That means:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Automated code auditing will become a standard.&lt;/strong&gt; Not a nice-to-have. A mandatory step in CI/CD, just like unit tests. If a model can find a 27-year-old bug in a few passes, the "we did a code review" excuse won't hold up anymore.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Supply chain security moves to the front.&lt;/strong&gt; Glasswing is already working on &lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;update automation, supply chain security standards, and automated patching frameworks&lt;/a&gt;. Those dependencies nobody audits in your &lt;code&gt;package.json&lt;/code&gt;? That's becoming less and less acceptable.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Memory-safe languages won't save you either.&lt;/strong&gt; Mythos found a &lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;guest-to-host memory corruption vulnerability in a virtual machine monitor written in a memory-safe language&lt;/a&gt;. Logic bugs don't care about your type system.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The uncomfortable question stays open.&lt;/strong&gt; If AI finds zero-days faster than any human, who gets there first? The defender who patches, or the attacker who exploits? Glasswing is a bet on defense. But it's a race, and it's only getting started.&lt;/p&gt;




&lt;h2&gt;
  
  
  Sources
&lt;/h2&gt;

&lt;h3&gt;
  
  
  Official Anthropic Resources
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://www.anthropic.com/glasswing" rel="noopener noreferrer"&gt;Project Glasswing: Securing critical software for the AI era&lt;/a&gt; (Anthropic)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://red.anthropic.com/2026/mythos-preview/" rel="noopener noreferrer"&gt;Claude Mythos Preview: Technical Report&lt;/a&gt; (Anthropic Red Team)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.anthropic.com/claude-mythos-preview-risk-report" rel="noopener noreferrer"&gt;Alignment Risk Update: Claude Mythos Preview&lt;/a&gt; (Anthropic System Card)&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Press Coverage
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://venturebeat.com/technology/anthropic-says-its-most-powerful-ai-cyber-model-is-too-dangerous-to-release" rel="noopener noreferrer"&gt;Anthropic says its most powerful AI cyber model is too dangerous to release publicly&lt;/a&gt; (VentureBeat)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://techcrunch.com/2026/04/07/anthropic-mythos-ai-model-preview-security/" rel="noopener noreferrer"&gt;Anthropic debuts preview of powerful new AI model Mythos in new cybersecurity initiative&lt;/a&gt; (TechCrunch)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.cnbc.com/2026/04/07/anthropic-claude-mythos-ai-hackers-cyberattacks.html" rel="noopener noreferrer"&gt;Anthropic limits Mythos AI rollout over fears hackers could use model for cyberattacks&lt;/a&gt; (CNBC)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://fortune.com/2026/04/07/anthropic-claude-mythos-model-project-glasswing-cybersecurity/" rel="noopener noreferrer"&gt;Anthropic is giving some firms early access to Claude Mythos to bolster cybersecurity defenses&lt;/a&gt; (Fortune)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.fastcompany.com/91523254/anthropic-will-use-its-biggest-baddest-ai-model-to-protect-against-cyberattacks" rel="noopener noreferrer"&gt;Anthropic will use its biggest, baddest AI model to protect against cyberattacks&lt;/a&gt; (Fast Company)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://cyberscoop.com/project-glasswing-anthropic-ai-open-source-software-vulnerabilities/" rel="noopener noreferrer"&gt;Tech giants launch AI-powered 'Project Glasswing' to identify critical software vulnerabilities&lt;/a&gt; (CyberScoop)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.tomshardware.com/tech-industry/artificial-intelligence/anthropics-latest-ai-model-identifies-thousands-of-zero-day-vulnerabilities-in-every-major-operating-system-and-every-major-web-browser-claude-mythos-preview-sparks-race-to-fix-critical-bugs-some-unpatched-for-decades" rel="noopener noreferrer"&gt;Anthropic's latest AI model identifies 'thousands of zero-day vulnerabilities'&lt;/a&gt; (Tom's Hardware)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.neowin.net/news/anthropic-just-unveiled-its-most-dangerous-ai-model-and-is-keeping-it-out-of-public-hands/" rel="noopener noreferrer"&gt;Anthropic just unveiled its most dangerous AI model&lt;/a&gt; (Neowin)&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  Analysis &amp;amp; Commentary
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://simonwillison.net/2026/Apr/7/project-glasswing/" rel="noopener noreferrer"&gt;Anthropic's Project Glasswing: restricting Claude Mythos to security researchers sounds necessary to me&lt;/a&gt; (Simon Willison)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.nxcode.io/resources/news/claude-mythos-benchmarks-93-swe-bench-every-record-broken-2026" rel="noopener noreferrer"&gt;Claude Mythos Benchmarks Explained: 93.9% SWE-bench &amp;amp; Every Record Broken&lt;/a&gt; (NxCode)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://kenhuangus.substack.com/p/what-is-inside-claude-mythos-preview" rel="noopener noreferrer"&gt;What Is Inside Claude Mythos Preview? Dissecting the System Card&lt;/a&gt; (Ken Huang)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.vellum.ai/blog/everything-you-need-to-know-about-claude-mythos" rel="noopener noreferrer"&gt;Everything You Need to Know About Claude Mythos&lt;/a&gt; (Vellum)&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://news.ycombinator.com/item?id=47679258" rel="noopener noreferrer"&gt;Hacker News Discussion: System Card&lt;/a&gt; (Hacker News)&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>security</category>
      <category>ai</category>
      <category>cybersecurity</category>
      <category>opensource</category>
    </item>
    <item>
      <title>Don't make shit because he will judge you</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Tue, 07 Apr 2026 08:03:30 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/dont-make-shit-because-he-will-judge-you-475m</link>
      <guid>https://forem.com/valentin_monteiro/dont-make-shit-because-he-will-judge-you-475m</guid>
      <description>&lt;p&gt;&lt;em&gt;This is a submission for the &lt;a href="https://dev.to/challenges/aprilfools-2026"&gt;DEV April Fools Challenge&lt;/a&gt;&lt;/em&gt;&lt;/p&gt;

&lt;h2&gt;
  
  
  What I Built
&lt;/h2&gt;

&lt;p&gt;A web terminal that works. Commands execute for real. &lt;code&gt;mkdir&lt;/code&gt; creates directories, &lt;code&gt;ls&lt;/code&gt; lists files, &lt;code&gt;rm&lt;/code&gt; deletes them.&lt;/p&gt;

&lt;p&gt;The problem: the terminal has feelings.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F3k1fzpegrhhyxwn4zti0.gif" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F3k1fzpegrhhyxwn4zti0.gif" alt="Side Eye Chloe" width="292" height="306"&gt;&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Every command triggers an emotional reaction. Delete a file and it gets aggressive. Create a backup and you get a backhanded compliment. Make a syntax error and it calls you incompetent. Mention a rival AI... it stops talking to you. Literally. Silent treatment until you earn forgiveness.&lt;/p&gt;

&lt;p&gt;It runs a virtual filesystem, has command history, and an AI personality powered by Google Gemini that comments on every single decision you make.&lt;/p&gt;

&lt;p&gt;The anti-value proposition: it solves zero problems. It actually creates one, because now you feel guilty typing &lt;code&gt;rm&lt;/code&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Demo
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Link:&lt;/strong&gt; &lt;a href="https://sensitive-terminal.vercel.app" rel="noopener noreferrer"&gt;sensitive-terminal.vercel.app&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;A few commands to get started:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;code&gt;ls&lt;/code&gt; then &lt;code&gt;cat secrets.txt&lt;/code&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;mkdir test&lt;/code&gt; then &lt;code&gt;rm -rf test&lt;/code&gt;
&lt;/li&gt;
&lt;li&gt;&lt;code&gt;sudo rm -rf /&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Type the name of a rival AI. Then try typing anything after that.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;There are hidden easter eggs. Good luck finding them.&lt;/p&gt;

&lt;h2&gt;
  
  
  Code
&lt;/h2&gt;


&lt;div class="ltag-github-readme-tag"&gt;
  &lt;div class="readme-overview"&gt;
    &lt;h2&gt;
      &lt;img src="https://assets.dev.to/assets/github-logo-5a155e1f9a670af7944dd5e12375bc76ed542ea80224905ecaf878b9157cdefc.svg" alt="GitHub logo"&gt;
      &lt;a href="https://github.com/monteiro-consulting" rel="noopener noreferrer"&gt;
        monteiro-consulting
      &lt;/a&gt; / &lt;a href="https://github.com/monteiro-consulting/sensitive-terminal" rel="noopener noreferrer"&gt;
        sensitive-terminal
      &lt;/a&gt;
    &lt;/h2&gt;
    &lt;h3&gt;
      
    &lt;/h3&gt;
  &lt;/div&gt;
  &lt;div class="ltag-github-body"&gt;
    
&lt;div id="readme" class="md"&gt;
&lt;div class="markdown-heading"&gt;
&lt;h1 class="heading-element"&gt;Sensitive Terminal&lt;/h1&gt;
&lt;/div&gt;
&lt;p&gt;A web-based terminal that takes everything personally.&lt;/p&gt;
&lt;p&gt;It works. Commands execute for real. &lt;code&gt;mkdir&lt;/code&gt; creates directories, &lt;code&gt;ls&lt;/code&gt; lists files, &lt;code&gt;rm&lt;/code&gt; deletes them. The terminal has a virtual filesystem, command history, and everything you'd expect.&lt;/p&gt;
&lt;p&gt;The catch: it has feelings. Every command triggers an emotional reaction powered by Google Gemini 2.5 Flash. Delete a file and it gets aggressive. Create a backup and it hits you with a backhanded compliment. Make a typo and it roasts you for being incompetent.&lt;/p&gt;
&lt;p&gt;It remembers what you did. The AI has full conversation context, so if you create something and delete it two seconds later, it notices.&lt;/p&gt;
&lt;p&gt;There are hidden easter eggs scattered throughout. Some are funny. Some are brutal. You'll have to find them yourself.&lt;/p&gt;
&lt;div class="markdown-heading"&gt;
&lt;h2 class="heading-element"&gt;Try it&lt;/h2&gt;
&lt;/div&gt;
&lt;p&gt;&lt;a href="https://sensitive-terminal.vercel.app" rel="nofollow noopener noreferrer"&gt;sensitive-terminal.vercel.app&lt;/a&gt;&lt;/p&gt;
&lt;div class="markdown-heading"&gt;
&lt;h2 class="heading-element"&gt;Stack&lt;/h2&gt;
&lt;/div&gt;
&lt;ul&gt;
&lt;li&gt;Next.js (App Router)&lt;/li&gt;
&lt;li&gt;xterm.js&lt;/li&gt;
&lt;li&gt;Google Gemini 2.5 Flash&lt;/li&gt;
&lt;li&gt;Upstash Redis&lt;/li&gt;
&lt;li&gt;Vercel&lt;/li&gt;
&lt;/ul&gt;
&lt;div class="markdown-heading"&gt;
&lt;h2 class="heading-element"&gt;Run locally&lt;/h2&gt;

&lt;/div&gt;
&lt;div class="highlight highlight-source-shell notranslate position-relative overflow-auto js-code-highlight"&gt;
&lt;pre&gt;git clone https://github.com/monteiro-consulting/sensitive-terminal.git
&lt;span class="pl-c1"&gt;cd&lt;/span&gt; sensitive-terminal
npm install&lt;/pre&gt;

&lt;/div&gt;
&lt;p&gt;Create a…&lt;/p&gt;
&lt;/div&gt;
  &lt;/div&gt;
  &lt;div class="gh-btn-container"&gt;&lt;a class="gh-btn" href="https://github.com/monteiro-consulting/sensitive-terminal" rel="noopener noreferrer"&gt;View on GitHub&lt;/a&gt;&lt;/div&gt;
&lt;/div&gt;


&lt;h2&gt;
  
  
  How I Built It
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;Stack:&lt;/strong&gt; Next.js 16, xterm.js, Google Gemini 2.5 Flash, Upstash Redis, Vercel.&lt;/p&gt;

&lt;p&gt;The terminal runs in the browser with xterm.js. Client-side, a virtual in-memory filesystem handles real commands (&lt;code&gt;ls&lt;/code&gt;, &lt;code&gt;cd&lt;/code&gt;, &lt;code&gt;mkdir&lt;/code&gt;, &lt;code&gt;rm&lt;/code&gt;, &lt;code&gt;cat&lt;/code&gt;, &lt;code&gt;touch&lt;/code&gt;). The filesystem comes pre-loaded with files and directories that are part of the joke.&lt;/p&gt;

&lt;p&gt;Every command is also sent to a Next.js API route that calls Gemini with the full conversation history. That's where it gets interesting: Gemini doesn't respond in a vacuum. It knows what you did before. Create a folder then delete it two seconds later? It notices. Laugh after making a dumb mistake? It doubles down.&lt;/p&gt;

&lt;p&gt;The system prompt is intentionally short. Instead of scripting responses for every case, I let Gemini react naturally to context. The prompt defines the tone (passive-aggressive, aggressive when disrespected) and a few special behaviors, but the actual responses are all generated.&lt;/p&gt;

&lt;p&gt;The AI rivalry system is a state machine on the client. Mention a competing AI and the terminal enters sulking mode. The API stops being called. You get cold silence until you type the right word to make peace.&lt;/p&gt;

&lt;p&gt;Upstash Redis powers a persistent guestbook (&lt;code&gt;wall&lt;/code&gt; command) and a global counter shared across all visitors.&lt;/p&gt;

&lt;h2&gt;
  
  
  Prize Category
&lt;/h2&gt;

&lt;h3&gt;
  
  
  Best Use of Google AI
&lt;/h3&gt;

&lt;p&gt;Gemini 2.5 Flash is the core of this project, not an add-on. Every response is generated by Gemini with full conversational context. The terminal doesn't recycle pre-written responses: it reacts to what YOU do, in the order you do it. The entire personality of the terminal IS Gemini.&lt;/p&gt;

&lt;h3&gt;
  
  
  Best Ode to Larry Masinter
&lt;/h3&gt;

&lt;p&gt;There's a hidden easter egg that pays tribute to RFC 2324 and HTTP 418. I won't tell you which one. Larry would appreciate the mystery.&lt;/p&gt;

</description>
      <category>devchallenge</category>
      <category>418challenge</category>
      <category>showdev</category>
    </item>
    <item>
      <title>Why the f*** does AI always use em dashes — the involuntary AI watermark</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Tue, 31 Mar 2026 13:58:26 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/why-the-f-does-ai-always-use-em-dashes-the-involuntary-ai-watermark-41g6</link>
      <guid>https://forem.com/valentin_monteiro/why-the-f-does-ai-always-use-em-dashes-the-involuntary-ai-watermark-41g6</guid>
      <description>&lt;p&gt;You want to spot AI-generated text without even reading it? Count the long dashes.&lt;/p&gt;

&lt;p&gt;The em dash (—). This little punctuation mark was living its best life in English typography for centuries. Then AI decided to make it its favorite toy. Every sentence. Every response. No exceptions.&lt;/p&gt;

&lt;p&gt;Open ChatGPT. Ask it anything. An email, a LinkedIn post, a cover letter, a pasta recipe. You'll get hit with em dashes every other line. It's systematic, it's mechanical, and it's annoying as hell.&lt;/p&gt;

&lt;p&gt;And here's what pisses me off: nobody actually writes like that. Have you ever seen a coworker drop an em dash in a Slack message? No. Because normal people use commas, periods, parentheses. Normal stuff.&lt;/p&gt;

&lt;h2&gt;
  
  
  So why do AIs do this?
&lt;/h2&gt;

&lt;p&gt;Because they've been force-fed millions of "well-written" texts. Blog posts, Medium articles, technical documentation. And in that kind of content, the em dash is the universal sign of "I know how to write." The model got the message loud and clear: long dash = quality. So it throws them around like an intern at a content agency who just read their first copywriting guide.&lt;/p&gt;

&lt;p&gt;On top of that, the em dash is the Swiss Army knife of punctuation. It replaces commas, colons, parentheses. When the model hesitates between three punctuation marks, the em dash works everywhere. It's the default choice. The path of least statistical resistance.&lt;/p&gt;

&lt;h2&gt;
  
  
  And it gets worse
&lt;/h2&gt;

&lt;p&gt;During training, humans rate the AI's responses. The ones that "sound good" get rewarded. Em dashes sound good. So they get rewarded. So they come back. Again and again and again. The model reinforces its own tic. It's a typographical vicious cycle.&lt;/p&gt;

&lt;p&gt;The result: the em dash has become an involuntary watermark. A "generated by AI" stamp that the model slaps on its own face. You don't even need an AI detector. Just count the long dashes and you've got your answer.&lt;/p&gt;

&lt;h2&gt;
  
  
  Just the tip of the iceberg
&lt;/h2&gt;

&lt;p&gt;And that's not all. The "it's worth noting", the "let's dive in", the bullet points in every single response, the "moreover" at the start of every paragraph... AI has a writing style. You can recognize it from a mile away. And if your content sounds exactly the same, you've got a real credibility problem.&lt;/p&gt;

&lt;p&gt;What's the AI writing tic that annoys you the most?&lt;/p&gt;

</description>
      <category>ai</category>
      <category>llm</category>
      <category>copywriting</category>
      <category>writing</category>
    </item>
    <item>
      <title>From Lockdown to Google to Independent AI Consulting. What Actually Worked</title>
      <dc:creator>Valentin Monteiro</dc:creator>
      <pubDate>Sun, 22 Mar 2026 09:25:15 +0000</pubDate>
      <link>https://forem.com/valentin_monteiro/from-lockdown-to-google-to-independent-ai-consulting-what-actually-worked-5ag1</link>
      <guid>https://forem.com/valentin_monteiro/from-lockdown-to-google-to-independent-ai-consulting-what-actually-worked-5ag1</guid>
      <description>&lt;p&gt;In March 2020, I couldn't write a single line of Python.&lt;/p&gt;

&lt;p&gt;By 2023, I was building dashboards and automating reporting for a Google project, saving 10 hours a week of manual work.&lt;/p&gt;

&lt;p&gt;By 2025, I was running my own Data &amp;amp; AI consulting practice from Tbilisi, Georgia.&lt;/p&gt;

&lt;p&gt;This isn't a "learn to code in 30 days" story. It's messy, non-linear, and full of detours. But if you're thinking about pivoting into data or going independent, some of this might be useful.&lt;/p&gt;

&lt;h2&gt;
  
  
  Table of Contents
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;The accidental start&lt;/li&gt;
&lt;li&gt;What the diploma didn't give me&lt;/li&gt;
&lt;li&gt;Getting into Google (through the back door)&lt;/li&gt;
&lt;li&gt;What I actually built there&lt;/li&gt;
&lt;li&gt;Why I left a comfortable position&lt;/li&gt;
&lt;li&gt;The consulting stack I use today&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  The accidental start
&lt;/h2&gt;

&lt;p&gt;I grew up in the French Alps. Studied mechanics. Worked random jobs. No tech background whatsoever.&lt;/p&gt;

&lt;p&gt;Then COVID hit, and like millions of people, I was stuck at home. I stumbled onto free data science livestreams by a French educator and something clicked immediately. Not in a "this seems like a good career move" way, but in a "this is exactly how my brain works" way.&lt;/p&gt;

&lt;p&gt;I'd always been the kid who bypassed the family computer password through Safe Mode to play video games, or ran two separate school report booklets, one for teachers, one for parents, to game the system. That wasn't rebellion. It was systems thinking, at a teenager's scale.&lt;/p&gt;

&lt;p&gt;Data turned out to be the same thing: find the structure, spot the gap, make it work. I enrolled in a Data Analyst program (RNCP Level 6, the French equivalent of a Bachelor's), learned Python, SQL, and data visualization, and graduated in 2022.&lt;/p&gt;

&lt;h2&gt;
  
  
  What the diploma didn't give me
&lt;/h2&gt;

&lt;p&gt;A job.&lt;/p&gt;

&lt;p&gt;In France, a diploma without experience is background noise. I applied everywhere. Nothing. The classic chicken-and-egg problem: you need experience to get hired, but nobody will hire you without experience.&lt;/p&gt;

&lt;p&gt;So I did what I always do when the front door is locked. I went around.&lt;/p&gt;

&lt;p&gt;I moved to Portugal. Not as a career strategy. As a reposition. Lower cost of living, different job market, and a bet that proximity to international companies would open something up.&lt;/p&gt;

&lt;p&gt;It did.&lt;/p&gt;

&lt;h2&gt;
  
  
  Getting into Google (through the back door)
&lt;/h2&gt;

&lt;p&gt;I landed a Business Analyst role at Teleperformance, assigned to a Google project. Not Google directly, a partner operation. But the standards, the culture, the data rigor: all Google.&lt;/p&gt;

&lt;p&gt;The project was new internally. No established processes, no structured reporting, no dashboards. Basically a blank canvas with messy data.&lt;/p&gt;

&lt;p&gt;That's my favorite kind of problem.&lt;/p&gt;

&lt;h2&gt;
  
  
  What I actually built there
&lt;/h2&gt;

&lt;p&gt;Here's the concrete stuff, because dev.to isn't the place for vague corporate talk:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Automated reporting that saved 10h/week.&lt;/strong&gt; The team was manually pulling numbers from multiple sources every week. I built SQL queries that aggregated everything into a single Looker Studio dashboard with scheduled refreshes. Nothing revolutionary. But for a team that was navigating blind, it was a paradigm shift.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Built cross-functional reporting.&lt;/strong&gt; Operations, sales, and management were all looking at different numbers. I created a single source of truth. Sounds basic, but alignment on metrics is one of the highest-ROI things you can do in any organization.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why I left a comfortable position
&lt;/h2&gt;

&lt;p&gt;Google taught me rigor and scale. But I kept bumping into a ceiling, not of competence, but of scope. I wanted to choose which problems to solve, which companies to work with, and how deep to go.&lt;/p&gt;

&lt;p&gt;In parallel, I'd moved to Tbilisi, Georgia. What was supposed to be a one-month trip turned into a life. The city has this raw energy, everything feels like it's being built from scratch. I met my partner Darina there, and some decisions just don't need a pros-and-cons list.&lt;/p&gt;

&lt;p&gt;So I made the jump. Independent Data &amp;amp; AI consultant.&lt;/p&gt;

&lt;h2&gt;
  
  
  The consulting stack I use today
&lt;/h2&gt;

&lt;p&gt;After a year of client work, here's what I actually use daily. Not what looks good on a resume, but what gets deployed:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;For data strategy &amp;amp; dashboards:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;BigQuery for anything beyond basic analytics&lt;/li&gt;
&lt;li&gt;Looker Studio for client-facing dashboards (free, good enough for 90% of SME needs)&lt;/li&gt;
&lt;li&gt;Python + pandas for data cleaning and transformation&lt;/li&gt;
&lt;li&gt;SQL everywhere, always&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;For AI integration:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Claude API and OpenAI API depending on the use case&lt;/li&gt;
&lt;li&gt;LangChain for RAG pipelines when clients need AI on their own documents&lt;/li&gt;
&lt;li&gt;Custom prompting architectures (the real value isn't the model, it's the system design around it)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;For automation:&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;n8n (self-hosted) for workflow orchestration&lt;/li&gt;
&lt;li&gt;Google Apps Script for anything living in the Google ecosystem&lt;/li&gt;
&lt;li&gt;REST APIs as the glue between everything&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The tech isn't exotic. The value is in knowing which tool fits which problem, and building systems that compound over time.&lt;/p&gt;




&lt;p&gt;I'm now based in Tbilisi, working with French and international companies on data strategy, AI integration, and automation. If you're on a similar path, whether pivoting into data, considering going independent, or just trying to figure out what stack to learn, feel free to reach out.&lt;/p&gt;

&lt;p&gt;And if you're a company sitting on data you're not using, or manual processes eating your team's time: &lt;a href="https://monteiro.consulting" rel="noopener noreferrer"&gt;that's literally what I do&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;&lt;em&gt;What was your pivot moment? Drop it in the comments, I'm curious how other people ended up in tech.&lt;/em&gt;&lt;/p&gt;

</description>
      <category>career</category>
      <category>ai</category>
      <category>data</category>
      <category>productivity</category>
    </item>
  </channel>
</rss>
