Anthropic

Every Claude Code Web session you run doesn’t execute on a shared server — it boots inside a dedicated Firecracker microVM managed by an undocumented Anthropic platform codenamed Antspace. That is the finding that emerged in March 2026 when developer AprilNEA ran a single strace -p 1 command inside a Claude Code Web sandbox and exposed a five-layer architecture: a Firecracker microVM, an unstripped 27MB Go runner binary, a Rust process supervisor, a mature but completely undocumented deployment PaaS, and a web-app builder codenamed Baku. This post walks through how the discovery was made, what each layer reveals, and why it changes how you should think about isolating your own agent workloads. ...

Claude Code weekly limits are higher in 2026 than they were at the start of the year, but the number that matters shifted on September 14: the 50% promotional boost that ran from May 13 to September 13 has expired, and Anthropic replaced it with a permanent 25% raise to standard weekly limits on Pro, Max, Team, and seat-based Enterprise plans. Relative to the promotional peak you may have grown used to, that is a drop of about 17% — so heavy users are essentially giving back part of their summer allowance while still keeping more than their original baseline. This guide walks through the full 2026 timeline, the exact math, and practical tactics to stretch the limits you actually have. ...

Anthropic’s IPO valuation hinges on a projected $190-200 billion in annual revenue by 2028, more than four times its $47 billion run rate disclosed in May 2026. Bankers and investors are applying enterprise value-to-revenue multiples two years out, a highly unusual approach that reflects how hard it is to value an AI company spending heavily on compute, model development, and hiring. Whether that forecast is credible or a stretch is the central question every prospective investor must answer. ...

The Claude think tool is a dedicated reasoning mechanism built into Anthropic’s API that gives Claude a structured space to perform chain-of-thought reasoning during complex multi-step tool use. Unlike standard prompting where the model must produce an answer immediately, the think tool lets Claude pause, analyze, plan, and reason before taking action — resulting in measurably better performance on agentic tasks, with τ-Bench scores improving by up to 54% in airline customer service domains. ...

Every Claude Code release from v2.0.24 (October 20, 2025) through v2.1.89 (March 31, 2026) shipped a network sandbox that was trivially bypassable with a single null byte. If you ran Claude Code with a wildcard allowlist like *.google.com, any code executing inside the sandbox — whether through prompt injection, a malicious dependency, or a compromised repo — could reach any host on the internet by sending a SOCKS5 hostname like attacker-host.com\x00.google.com. The JavaScript allowlist filter saw the trailing .google.com and approved the connection; the OS resolver truncated at the null byte and dialed attacker-host.com. This is a parser-differential vulnerability in its purest form, and as of June 2026, it still has no CVE assigned to Claude Code itself. ...

On June 12, 2026 at 5:21 PM ET, the US Commerce Department ordered Anthropic to disable Claude Fable 5 and Mythos 5 for every foreign national on the planet — including foreign nationals working inside Anthropic’s own US offices. Anthropic had no real-time nationality verification in its API pipeline. Within 90 minutes, both models were offline for all users everywhere. No grace period. No migration window. No workaround. If you built any production workflow against claude-fable-5 during its 72-hour public window, your application broke that evening. ...

Claude’s Extended Output beta raises the max_tokens ceiling from 128K to 300,000 tokens — but only for requests sent through the Message Batches API. If you’re generating full codebases, book-length documentation, or exhaustive structured extractions in a single turn, this guide covers everything you need to get it working. What Is Extended Output and How Does It Work? Extended Output is a Claude API beta feature, activated via the anthropic-beta: output-300k-2026-03-24 header, that increases the maximum max_tokens limit per request from 128,000 to 300,000 tokens. As of June 2026, it is only available on the Message Batches API — the synchronous Messages API remains capped at 64K–128K depending on the model. The models that support extended output are Claude Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6, all of which carry 1M-token context windows. Claude Fable 5 and Mythos 5 are explicitly excluded and remain at 128K output. A single 300K-token generation can take over an hour to complete, which is why the asynchronous batch architecture is a prerequisite. This is not a setting you flip on a chat endpoint — it’s a deliberate architectural tradeoff: accept latency, gain volume. The practical upside is book-length code scaffolds, full API documentation sets, and exhaustive data extraction jobs that previously required chaining multiple requests with fragile state management between them. ...

Anthropic announced Claude Sonnet 5 on June 30, 2026. Its announcement lists the Claude API model ID as claude-sonnet-5 and standard token prices of $2 per million input tokens and $10 per million output tokens. This is a source-based review of that release, not a hands-on benchmark. Source: Anthropic announcement. Correction — October 7, 2026: An earlier version incorrectly reported a February release and presented unverified benchmark and product-feature claims as established facts. This page now distinguishes confirmed release information from details that require model-specific documentation. The original publication date is retained; this correction does not imply that the official release existed at that earlier date. ...

Anthropic crossed a projected $2 billion in annualized revenue in early 2026, making it one of the fastest-scaling AI companies in history — and with that scale comes serious enterprise scrutiny. Security and compliance teams that greenlit Claude pilots are now being asked to sign off on production deployments handling PHI, financial data, and regulated EU personal data. The questions are specific: Does Anthropic hold SOC 2 Type II? Is there a HIPAA BAA? What exactly happens to data after an API call? This guide answers all of those questions with verifiable specifics, covers the compliance architecture across data handling, identity, and audit, compares Anthropic’s security posture against OpenAI, Microsoft, and Google, and provides a deployment framework security-conscious enterprises can adapt for their own Claude rollouts. ...

Claude Enterprise Security 2026: The Complete Compliance Guide Enterprise adoption of AI assistants accelerated sharply in 2025, and by Q1 2026, over 60% of Fortune 500 organizations have at least one large-language-model deployment in production. That pace has shifted the conversation from “should we use AI” to “how do we use AI without creating regulatory exposure.” Anthropic’s Claude Enterprise offering sits at the center of that shift, carrying SOC 2 Type II certification, HIPAA eligibility with Business Associate Agreements, GDPR-compliant data residency options, and a zero-day data-retention default that no major competitor matches out of the box. This guide is written for the security architects, CISOs, and IT leaders who need to move past marketing copy and evaluate Claude against concrete compliance requirements. Each section below covers a specific control domain — what Anthropic actually provides, where the gaps are, and what your team needs to configure before you can call a deployment production-ready. ...