Just found out about this and had to share because almost nobody is talking about it yet.

If you are tired of paying for AI courses or getting hit with paywalls just to get a certificate, Anthropic (the creators of Claude) quietly dropped a massive library of completely free, official training modules.

Yes, they actually give you an official certificate of completion directly from Anthropic once you finish.

Here is the breakdown of what is available and exactly how to get it without spending a dime.

What is in the course catalog?

They have split the training into a few different paths depending on what you want to do:

• The Big Surprise: Agentic AI & MCP: They have official courses on the Model Context Protocol (MCP). This is the cutting-edge tech used to build AI Agents that can browse your local computer, use tools, and execute tasks autonomously.
• Claude Code 101: Dedicated developer modules for their new command-line agent. It teaches you how to let Claude edit your codebase, run tests, and use its new "Plan Mode."
• API & Cloud Architecture: Deep dives into building with the Claude API, plus corporate tracks for deploying Claude securely inside Amazon Bedrock and Google Cloud Vertex AI.
• Everyday Productivity: If you aren't a coder, they have "Claude 101" and "AI Fluency" tracks. These teach advanced prompting, managing Projects, and using Artifacts for daily work.

How to access it for free

Anthropic hosts these courses on their official training academy platform (built on Skilljar). Because I can't post direct links here, here is how you find it:

1. Search Google for "Anthropic Skilljar Academy" or "Anthropic Skilljar Catalog".
2. Click the official link pointing to the Anthropic Skilljar domain.
3. Sign up for a free account. You do not need to enter any credit card info.
4. Choose your track, complete the lessons, pass the quick review quizzes, and download your certificate.

Go grab these before they decide to gate them behind a paywall!

Do you know that feeling after an amazing party, a concert, a protest, a sports event, or a spontaneous adventure?

You get home, still buzzing from the music, conversations, and people you met — but just a few days later, so many memories start to fade. Maybe you only took two photos yourself. Maybe someone else recorded a great video, but you never get to see it.

This exact feeling is what inspired my idea.

I’m building a website where every event gets its own dedicated page. Participants can upload photos and videos, comment, and keep all the shared memories in one place.

You can discover events happening in cities, join them, and also create new ones — whether it’s parties, concerts, sports events, demonstrations, markets, or community meetups.

I’d love to hear your feedback. How stupid the idea is ?

Since posting my vibe-coded app in general population and getting roasted it's great to find a safe place where people can show the world what they've created without the hate.

Definitely my favorite place in Reddit

I kept seeing people hesitant to share their code for security scans so I made the whole thing run locally.

npx should-i-ship scan

It checks for missing auth, rate limiting gaps, exposed secrets, input validation issues, dangerous functions, and general launch blockers. You get your top 3 findings with full detail for free.

So far across scans I’ve been running, 40% of projects had hardcoded credentials, 40% had zero rate limiting on API endpoints, and 40% had routes with no auth at all. These aren’t edge cases. They keep showing up.

If you want the complete report with every finding, exact files, and fix prompts, that’s $10. Still no account needed. Findings get uploaded (never source code), you get a link, you pay, you see everything.

If you have Semgrep or OSV installed locally it’ll run those too for deeper security and dependency checks. I’d recommend it if you’re serious about shipping something to prod.

Almost at 1k npm downloads in about two weeks. Just want to help people catch this stuff before their users do.

npx should-i-ship scan

I developed an LSP, VS-Code extension and NPM package, please try it out and give me your thoughts!

Last year I saw that a lot of people were making great money building and marketing iOS apps and with no code tools I felt like I could give it a shot.

I spent around 4 weeks going back and forth with a no code tool until I had an app that was happy with. Studied onboarding flows, knew exactly how i was going to market it & was super pumped.

Then it was time to submit...

The tool I was using promised "One-click to App Store", but only got me to TestFlight.

I felt lied to and was left having to figure out the submission process myself until I eventually gave up.

My app never reached the app store and I never got to share it with the world.

It was while I was struggling with submission that I thought a better solution was needed. Something that could automate the submission process and make it as easy as it was to prompt the coding tool used to make the app.

After doing some research & talking with some more experienced devs, I realized that the App store rejections are a real problem too. The avg new app gets rejected 3.5 times before it sees the App Store, and each rejection means days of delays until launch.

I decided to fix this.

I built a tool called Tminus. It automates the entire app submission process, generates metadata and policies, submits it for review, and soon it will be able to automatically handle rejections so you never have to deal with the Apple review team again.

Let me know, is this something you'd use?

A useful agentic change does not end when the diff appears. It ends when the system is coherent again.

I watched this exact loop last month: we asked an agent to tighten signup validation. It updated the form, the server-side validator, even the e2e test. Green across the board. We shipped. Two minutes later realized the password reset was broken.

A software change is not merely code moving. It is a shift in the requirement set.
There's a gap between the physical system (code, tests, schemas, diffs) and the theoretical system (requirements, contracts, constraints). Agents edit the former. We care about the latter.

When those two layers drift apart, an agent can satisfy the explicit task while breaking an implicit requirement nobody named and no automated check protects.

This post is my attempt to reason about that gap, and how to structure an agentic engineering harness around requirements, contracts, and deterministic feedback loops instead of just writing longer instruction files.

If you're interested, give it a read. If not, maybe let me know what I could do better!

Appreciate any feedback, and happy to partake in discussions :)

The idea is simple: search public repositories and references that appear to contain proof-of-concept exploit material, indexed by CVE identifier.

You can search by an exact CVE ID, for example:

CVE-2021-44228

Or use a partial string/vendor keyword to find related results.

Current index:

7,466 CVEs

This is not a vulnerability scanner, exploit database, exploit marketplace, or “AI cyber threat intelligence” dashboard.

It is a lightweight lookup layer for quickly checking what public PoC material appears to exist around a vulnerability and which references are associated with it.

The public tier is deliberately limited:

• 3 searches per day
• 3 results per query
• email submission for extended access / whitelist

The intended use case is research, triage, defensive validation, and quick visibility into public PoC exposure.

I’m keeping it narrow on purpose. No magic scoring. No fake certainty. No pretending that the presence of public PoC material automatically means a system is exploitable.

Just indexed public references by CVE, with the limitations kept visible.

Feedback welcome, especially around:

• search behaviour
• useful filters
• false positives
• reference quality signals
• whether vendor/keyword lookup is useful or too noisy

How important are these backend features to you?

• Sign-up policy controls (ex: only company emails allowed)
• Role-based access control
• Automatic login-user data isolation (prevent users from seeing other users’ records)
• Data intent / semantic metadata (AI understands what fields are actually for)

Feels like AI coding tools can generate UI fast, but backend safety/governance is still painful.

Curious whether people see this as a real problem or just overengineering.