Claude Mythos Beats Pentest Firm for $10K: ShipHero CEO

Anthropic's Claude Mythos is a controlled security model that redefines expectations for vulnerability reviews. It is not just another AI coding feature; it's designed to find and reproduce software vulnerabilities. Access to Mythos is kept behind Project Glasswing. What's interesting is that ShipHero CEO Aaron Rubin stated Claude Mythos beat his pentest firm for $10,000. ShipHero is a warehouse management software company powering over $15 billion in annual GMV. Anthropic announced Claude Mythos Preview on April 7, 2026, as part of Project Glasswing. Mythos has found a 27-year-old bug in OpenBSD's TCP SACK handling and a 16-year-old flaw in FFmpeg during its testing. It also turned Firefox JavaScript engine flaws into working shell exploits 181 times in a benchmark. The bottom line is that the line between automated scanning and expert vulnerability research is rapidly thinning, impacting how companies should approach their security budgets.