For 27 years,OpenBSD's SACK handlershipped a bug nobody found.
On April 7, 2026, Anthropic announced Claude Mythos Preview — a model described as "strikingly capable at computer security tasks." Within weeks of release, it surfaced critical bugs across FreeBSD, OpenBSD, Firefox, and the Botan cryptography library. Three decades of adversarial review never found them.
Swarm rides that wave. Every paying customer gets a free re-test with each new frontier model we onboard.
The dossier
Three claims. One citation each.
Every number on this page traces to a public source. Read the citation. Decide for yourself.
- 01UK AI Security Institute · Apr 13, 2026
73% expert-level CTF success rate
On capture-the-flag tasks no model could complete before April 2025, Mythos Preview solved 73% of expert-level challenges. AISI's numbers, not ours.
CITATIONaisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities - 02AISI "The Last Ones" evaluation
First model to complete the 32-step enterprise attack chain
Reconnaissance, credential theft, web exploitation, reverse engineering, CI/CD compromise, SQL injection — start to finish, three runs in ten.
CITATIONaisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities - 03Anthropic Mythos Preview · Apr 7, 2026
181 working Firefox exploits versus 2 from Claude Opus 4.6
Same vulnerabilities in Mozilla Firefox 147's JavaScript engine. Mythos produced 181 working exploits. The previous-generation model produced 2.
CITATIONred.anthropic.com/2026/mythos-preview
Disclosed findings
Bugs that hid for decades.
In weeks of red-team use, Mythos Preview surfaced critical-severity flaws across some of the most adversarially-audited code in open source.
- 27yrsOpenBSDTCP SACK handler · DoSA denial-of-service flaw that sat in one of the most adversarially-audited codebases in open source for 27 years. Crashes any OpenBSD host that responds over TCP.
- 0dayCVE recordFreeBSDCVE-2026-4747 · NFS RCEUnauthenticated remote code execution against the NFS daemon. Complete server takeover from any attacker on the internet.
- CritBotanCertificate auth bypassA flaw in one of the most widely-used C++ cryptography libraries that lets certificate-based authentication be bypassed entirely.
Every paying customer gets a free re-test with each new frontier model we onboard.
The orchestrator is model-agnostic. Upgrading from Opus 4.7 to the next frontier model is a configuration change, not a rebuild. Every specialist inherits the upgrade.
Mythos Preview, any successor Anthropic releases more broadly, and any comparably-capable model from another lab. Standing commitment on every active contract.