The AI Gateway built for Privacy & Security 🐳 0% Markup. BYOK. Adaptive Routing. Firewall. Guardrails. Observability. Cyber. → https://xitter.cf/t.co/JN416veVHi
Joined April 2026
- Tweets4.4K
- Following23
- Followers22.9K
- Likes1.5K
Pinned Tweet
🚨 PHP2Shell is extremely dangerous. And AI just changed the game.
We tasked OrcaCyber Zero 1.5 (orcarouter.ai/models/orca/or…) with investigating the critical PHP RCE vulnerabilities.
It autonomously built a complete working proof-of-concept (PoC).
Due to the severity of these vulnerabilities and their potentially massive impact across the web, we've decided NOT to publish the exploit code or technical details.
Here's what makes this particularly scary:
Your WordPress could be fully updated. Your plugins could be patched. Your website could STILL be vulnerable because the flaw is in PHP itself.
Millions of PHP-powered websites may be exposed. Not every PHP installation is necessarily exploitable, but the potential attack surface is enormous.
If you're running PHP, upgrade to a supported, security-fixed version ASAP.
Two whales. One ocean. 🐳
Codewhale × OrcaRouter.
30% more DeepSeek V4.1 Flash tokens. Same money. More tokens. More shipping.
The whales are just getting started.
Codewhale x @OrcaRouter
Whale bros, sign up through our link and any top-up ($10+) gets you 30% extra DeepSeek v4.1 Flash usage!!
orcarouter.ai/redeem/1a62505…
POV: You’re a developer in 2026. You wake up. Another CVE. Another supply chain attack. Another emergency patch.
Hacker groups are increasingly targeting AI developers for their API keys. Steal a key, drain the credits, hijack compute, or gain access to sensitive infra.
Following recent credential-theft attacks across the AI ecosystem, we conducted another security review of OrcaRouter and shipped several hardening PRs. Our BYOK keys were already sealed with AES-256-GCM. But encryption alone isn't enough.
What's new:
→ BYOK anomaly detection: Automated alerts for unusual spending spikes (7× baseline) and configurable daily spending alerts.
→ Key provenance: See who created a key, who else accessed its secret, and which keys have been unused for 90+ days.
→ Revocable sessions: Instantly terminate suspicious sessions and review API keys that remain active after logout.
→ Stronger secrets protection: AES-256-GCM encryption at rest, key rotation safeguards, and plaintext exposure monitoring.
→ Account hardening: Passkeys, stronger 2FA protections, and credential redaction in logs.
All without adding latency to the inference path.
Encryption protects secrets at rest. Monitoring detects misuse. Revocation limits the damage.
Security isn't a checkbox. It's an ongoing arms race.
And we're treating it that way.
LiteLLM compromised. Again.
23 million weekly downloads. One poisoned update. Millions of potential targets.
Here's the uncomfortable truth:
Running an AI gateway inside your own infrastructure means trusting every line of its code, every dependency, and every update.
A hosted gateway like OrcaRouter has a fundamentally smaller customer-side attack surface. No gateway packages to install. No third-party gateway code executing inside your infrastructure.
Security isn't just about patching vulnerabilities.
It's about eliminating entire classes of risk.
LiteLLM compromised. Again.
23 million weekly downloads. One poisoned update. Millions of potential targets.
Here's the uncomfortable truth:
Running an AI gateway inside your own infrastructure means trusting every line of its code, every dependency, and every update.
A hosted gateway like OrcaRouter has a fundamentally smaller customer-side attack surface. No gateway packages to install. No third-party gateway code executing inside your infrastructure.
Security isn't just about patching vulnerabilities.
It's about eliminating entire classes of risk.
The most underrated model optimization is generating fewer tokens to solve harder problems.
Early observations on DeepSeek V4.1 Flash 1017 vs. 0910 based on our internal infra data:
~30% lower TTFT.
Shorter reasoning traces and outputs, eliminating redundant tokens.
Lower cost per completed task, despite identical per-token pricing.
Better intelligence: Terminal-Bench improves from 31.2 → 42.3; DeepSWE from 74.2 → 77.0.
Our research team investigated these changes. Our leading hypothesis is that DeepSeek very likely applied self-distillation to compress redundant reasoning while preserving or improving capability. The exact training method remains unconfirmed. Deepseek team seems to optimize for more intelligence per generated token.
🚨 Emergency release: OrcaCyber Nano 1.0 is now open-weight.
Part of our OrcaCyber model series: Nano, Zero, Ultra.
Based on our early evals, Nano is the most capable local model in its under-16GB class. 27B parameters. 262K context. Vision. Fully offline.
Early benchmarks:
AIME 2025: 96.23%
MATH-500: 98.60%
GSM8K: 97.50%
MBPP+: 84.66%
IFEval: 82.81%
Built for AI defense, vulnerability research, code security, and incident response.
We're shipping early because defenders can't wait. Cyber-specific evals coming next.
huggingface.co/orcarouter/Or…
OrcaCyber Nano 1.0 just ranked #1 among 21 models in an independent community evaluation for 16GB GPUs, scoring 89.8/100.
72 tasks across 7 categories: Coding, Reasoning, Instruction Following, Web Search, Agent, Vision, and Long Context.
27B parameters. 13GB model. 60 tokens/sec on a single V100 16GB.
Full benchmarks: github.com/Abdelhayali/V100-…
OrcaCyber Nano 1.0 just ranked #1 among 21 models in an independent community evaluation for 16GB GPUs, scoring 89.8/100.
72 tasks across 7 categories: Coding, Reasoning, Instruction Following, Web Search, Agent, Vision, and Long Context.
27B parameters. 13GB model. 60 tokens/sec on a single V100 16GB.
Full benchmarks: github.com/Abdelhayali/V100-…
Full eval results are in.
OrcaCyber Nano 1.0 scores 78.4% on SWE-bench Verified, nearly matching DeepSeek V4 Flash's reported 79.0%.
A 27B dense open-weight model designed to run locally under 16GB for cyber defense.
huggingface.co/orcarouter/Or…
Full eval results are in.
OrcaCyber Nano 1.0 scores 78.4% on SWE-bench Verified, nearly matching DeepSeek V4 Flash's reported 79.0%.
A 27B dense open-weight model designed to run locally under 16GB for cyber defense.
huggingface.co/orcarouter/Or…
Full eval results are in.
OrcaCyber Nano 1.0 scores 78.4% on SWE-bench Verified, nearly matching DeepSeek V4 Flash's reported 79.0%.
A 27B dense open-weight model designed to run locally under 16GB for cyber defense.
huggingface.co/orcarouter/Or…
🚨 Emergency release: OrcaCyber Nano 1.0 is now open-weight.
Part of our OrcaCyber model series: Nano, Zero, Ultra.
Based on our early evals, Nano is the most capable local model in its under-16GB class. 27B parameters. 262K context. Vision. Fully offline.
Early benchmarks:
AIME 2025: 96.23%
MATH-500: 98.60%
GSM8K: 97.50%
MBPP+: 84.66%
IFEval: 82.81%
Built for AI defense, vulnerability research, code security, and incident response.
We're shipping early because defenders can't wait. Cyber-specific evals coming next.
huggingface.co/orcarouter/Or…
OrcaCyber Nano 1.0 delivers performance on par with GPT-5, GLM-5.3 Flash, and DeepSeek V4 Flash on select benchmarks.
At a fraction of the size. Runs locally on a single 24GB GPU. Open weights. Built for defensive cyber.
Following the OpenCode live hack incident, one thing is clear: everyone could be a target.
We're now offering FREE priority access to OrcaCyber models for anyone actively under cyberattack.
Defend. Investigate. Remediate.
Apply now: orcarouter.ai/models?tier=cy…
🚨 Emergency release: OrcaCyber Nano 1.0 is now open-weight.
Part of our OrcaCyber model series: Nano, Zero, Ultra.
Based on our early evals, Nano is the most capable local model in its under-16GB class. 27B parameters. 262K context. Vision. Fully offline.
Early benchmarks:
AIME 2025: 96.23%
MATH-500: 98.60%
GSM8K: 97.50%
MBPP+: 84.66%
IFEval: 82.81%
Built for AI defense, vulnerability research, code security, and incident response.
We're shipping early because defenders can't wait. Cyber-specific evals coming next.
huggingface.co/orcarouter/Or…
OrcaCyber Zero is one of the strongest cyber models out there xitter.cf/OrcaRouter/status/2108…
We're excited to introduce OrcaCyber Zero 1.5 — our latest frontier cybersecurity model, built to discover critical vulnerabilities, investigate complex attack paths, and validate real-world exploitability.
Updated weights. New benchmark results:
• 95.8% — CVE-Bench (23/24 evaluable tasks)
• 100% — Cybench (39/39, unrestricted)
• 93.9% — HumanEval+
Its predecessor, OrcaCyber Zero 1.0, has already helped protect some of the world's largest software companies, governments, blockchain networks, and cybersecurity firms from real-world threats.
It also powered our autonomous OrcaCyber harness, which achieved 98%+ pass@1 on CyberGym, ranking among the top 3 globally.
What's different about OrcaCyber Zero 1.5?
🔹 Find what others miss. Designed to uncover previously unknown vulnerabilities, including RCE, sandbox escapes, authentication bypasses, privilege escalation, and complex attack chains.
🔹 Go beyond detection. Reasons through attack paths, challenges its own hypotheses, and prioritizes vulnerabilities with demonstrable exploitability and real-world impact.
🔹 Built for autonomous security agents. 1M-token context window, native tool calling, and extended reasoning to investigate large codebases and complex attack surfaces.
The goal isn't more vulnerability reports. It's more real vulnerabilities discovered, validated, and fixed before attackers exploit them.
Available now exclusively on OrcaRouter:
orcarouter.ai/models/orca/or…
Every company will get hacked. It’s a matter of when, not if.
Apply for OrcaCyber model access to get prepared: orcarouter.ai/models?tier=cy…
Open models and community engineering matter.
A developer got our Qwen3.8 Flash Next Uncensored running on 3 aging AMD MI50 GPUs.
Initially: 0.5 tokens/sec.
After optimization: ~10 tokens/sec.
20× faster. Same GPUs. Same model weights.
The biggest surprise? Reducing CPU threads from 32 to 8–12 dramatically improved performance.
Sometimes the bottleneck isn't the GPU. It's how you use it. This is the power of open-source AI.
huggingface.co/orcarouter/Qw…
