Anonymous AI Coding Model Raises Security Questions

Mystery model surfaces with free access

A sophisticated AI coding model has been operating on OpenRouter since August 20 with no company claiming responsibility for its development. The system, listed as "Ox Alpha," offers free access and handles up to 100 trillion tokens daily through OpenCode, an open-source terminal agent that launched the model on the same date.

The model supports a context window of more than one million tokens and accepts text, image and video inputs. OpenRouter describes it as a reasoning system designed for complex software engineering tasks and sustained autonomous work. Free access through OpenRouter was scheduled to end August 24, while OpenCode promised availability through approximately August 27.

Performance and attribution efforts

Early benchmark results generated significant attention. Developer Ben Davis initially reported scores above 80% on a subset of the DeepSWE software engineering benchmark, substantially higher than Claude Fable 5's 65% and GPT-5.6-sol's 52% on the same tasks. However, Davis cautioned about the small sample size, and subsequent testing across the full benchmark showed Ox Alpha performing roughly equivalent to GPT-5.6-sol mid rather than exceeding it.

Investigative work has focused on identifying the model's origin. A developer using the handle unclecode created a fingerprinting tool called modelprint that sends nine infrastructure probes to anonymous API endpoints. Ox Alpha matched GLM-5.3 on six of nine probes, including all four normalized tokenizer counts. No other laboratory's candidate matched more than two of the four tokenizer measurements.

Chinese AI developer Z.ai has previously tested models anonymously on OpenRouter, running GLM-5 under the name Pony Alpha before its official release. GLM-5.3 launched August 14, six days before Ox Alpha appeared. Some analysts have suggested Xiaomi's MiMo team as an alternative source, noting tokenizer behavior that resembles OpenAI's cl100k_base encoding.

Why it matters

The data retention policies present serious concerns for enterprise users. OpenRouter states that prompts and completions are retained by the provider and may be used for training, evaluation and improvement under terms covering anonymous previews. OpenCode claims zero retention but does not identify the provider. If the model originates from Z.ai—the company formerly known as Zhipu AI—the implications intensify. The U.S. Commerce Department added Zhipu AI to its Entity List in January 2025, citing the company's role in advancing China's military modernization through AI research. Enterprise code is flowing to an unidentified provider with no mechanism for users to verify where their data lands.

Despite these uncertainties, usage has continued at scale. Coding tools including Claude Code have processed billions of tokens through the model since Thursday, according to Bloomberg reporting on Sunday. OpenRouter has stated it is not the developer, owner or operator of Ox Alpha and only routes requests to the system.

The details were first reported by SiliconANGLE.