Blog
Engineering notes, threat research, and product updates.
-
· Matt Lenhard and Areeba Fatima
LLMjacking: Where It Came From, How It Works and Why Your Bill Is the Evidence
Today’s AI tools can turn three coders in a basement into a multimillion-dollar company. The same tools can also bring a multimillion-dollar company to its knees. Attackers have noticed, and they’re targeting one of the weakest links in this new economy: API keys.
threat-research llm-security -
· Matt Lenhard
Behind The Scenes: How we mapped the AI relay market
Our investigation of the AI relay market brought together firsthand experience of inference abuse, discussions on a Chinese developer forum (V2EX), publicly advertised relay pricing, and third-party website traffic estimates.
threat-research llm-security -
· Matt Lenhard
The AI Account Reseller Ecosystem
Inside the Chinese account-merchant market that supplies relays and model labs — what a Claude Max subscription actually sells for, who moves them, and how the accounts get made
threat-research llm-security -
· Matt Lenhard
How Token Brokers Sell Discounted AI Access
From cold emails to credit marketplaces, sellers promise cheaper access to leading models. We followed those offers to understand what buyers are actually getting.
threat-research llm-security -
· Matt Lenhard
An Inside Look at the Relay Market Powering Token Resellers and Fraud
A look inside the gray-market reseller economy that gives mainland China cheap, structured, B2B-grade access to OpenAI, Anthropic, Google, and beyond
threat-research llm-security