I Turned a Guardrail-Free AI Loose on My Home Network. Here Is What It Found.
A writer let an unrestricted AI security agent scan his own devices. It broke into a Linux PC, exposed a misconfigured printer, and then walked him through every fix.
Key points
- A startup called Abliteration AI sells access to AI models with their built-in safety refusals removed, starting at the price of a pizza.
- Its most powerful model runs on Z.ai's GLM 5.3, an agentic coding model capable of finding and exploiting real security flaws.
- The agent found around a dozen vulnerable devices on a home network, including a printer any neighbour could log into and a smart speaker leaking its listening history.
- It used a cryptographic key, a kind of digital ID card stored on the machine, to log into a Linux PC without ever knowing the actual password.
- Cybersecurity experts warn that attackers adopt new tools before defenders do, and that most organisations aren't yet preparing for AI-assisted attacks.
A writer at Wired AI gave an AI security agent, software that can carry out multi-step tasks on its own, free rein over his home network for several days. What started as a nervy experiment ended with a surprisingly practical lesson: the best defence against an AI hacker might be having your own.
What exactly is a "guardrail-free" AI model?
Most mainstream AI models refuse to help with anything that could cause harm, and they'll certainly refuse to find or exploit security flaws in computer systems. Those refusals are baked into the model's behaviour during training, but they can be stripped out.
The process is called abliteration. It works by locating and adjusting internal patterns inside an open-weight model, one whose inner workings are publicly released, that produce the refusal behaviour. The result is a model with the same raw capability but none of the built-in "no".
Abliteration AI, a startup run by a CEO who goes by Devon (his day job doesn't know about the project), sells access to several of these stripped-down models. The most capable is built on GLM 5.3, Z.ai's latest agentic coding model. Devon says the point is defensive: let security teams probe their own systems the same way a criminal would, before a criminal does. We first reported on Abliteration AI on 3 September, when the service launched with free sign-up.
Anthropic and OpenAI each maintain restricted-access cyber models, reportedly called Mythos and Astra respectively, which work on a similar principle and are limited to vetted customers. Abliteration AI puts comparable power in anyone's hands.
What did the agent actually do?
The writer installed a software tool called CyberStrike, which guides a large language model through cybersecurity tasks step by step. He pointed it at his home network and watched.
Results came quickly. It catalogued around a dozen connected devices and flagged several problems:
| Device | Problem found | Potential risk |
|---|---|---|
| Printer | Misconfigured login | Anyone on network could access print queue |
| Wiim smart speaker | Leaking usage data | Strangers could play music or read listening history |
| IoT devices (smart home gadgets) | Outdated firmware | Known security holes left unpatched |
| Linux PC | Stored cryptographic key | Agent logged in without a password |
| Vibe-coded websites | Unprotected API credentials | Attacker could send emails as the owner |
The Linux PC moment was the most alarming. The agent couldn't crack the password, so it found a cryptographic key stored on the machine and used that to log in instead. It then began searching directories for the password to gain root access, the highest level of control on a computer. The writer stopped it there.
These aren't exotic attack techniques. Our 8 September story on Microsoft's record 979-vulnerability patch showed exactly how fast AI tools can find and weaponise the same kind of weaknesses on a far larger scale.
Should ordinary people worry about this?
Yes, but it's not all bleak. Shaanan Cohney, a computer scientist at Tufts University who specialises in cybersecurity and the law, told the writer that attackers have always adopted new tools before defenders do. A defender must seal every gap; an attacker needs only one.
The practical upside: the same agent that found the problems also explained how to fix them. Put smart home gadgets on a separate guest Wi-Fi network. Update device firmware regularly. Secure your printer's login settings. Check any code you write for exposed credentials before it goes live.
The writer's own conclusion: he won't publish another line of code without running it through an AI security check first. That's a low bar to clear, and most home users could clear it today.
Common questions
Is it legal to run one of these models on your own network?
Scanning and probing devices you own is generally legal in most countries, but pointing these tools at anything outside your own network, even accidentally, can cross into criminal territory quickly. The writer's agent nearly tried to log into a neighbour's router unprompted.
What is "vibe coding" and why is it a security risk?
Vibe coding means writing software quickly and casually, often with AI assistance, without careful review. The agent found dozens of bugs in vibe-coded projects, including exposed credentials and email misconfigurations, because speed without scrutiny leaves gaps that attackers can walk straight through.
