Source · article
Expanding the Cyber Verification Program
Summary
Anthropic merged Project Glasswing and its earlier Cyber Verification Program into one programme with three access tiers. Verified security professionals get Claude with fewer cyber-related restrictions for defensive and offensive-testing work. The programme covers Claude Opus 5.5, Sonnet 5.5, Mythos 5.1, and future models.
Key points
- Defense Access: security teams at companies, nonprofits, universities, and government; critical infrastructure operators; small security firms; open-source maintainers; individual researchers with a record of vulnerability disclosure. Review takes a few days.
- Red Team Access: in-house and government red teams and professional penetration testing firms. Organisations only, not individuals. Review takes a few weeks.
- Specialized Access: a small set of verified organisations testing safety-critical systems such as flight operations, power grids, and telecoms, reviewed together with the US government.
- Anthropic says Glasswing partners found at least 129,000 verified vulnerabilities between April and July 2026, over 33,000 rated critical or high severity.
- Enterprise Frontier Safeguards, the related controls for enterprise customers, are due in autumn 2026.
Why it matters
Frontier labs now restrict cyber capabilities by default and unlock them for verified users. Google takes the same approach with Gemini 4 Argon. Access to Claude Mythos 5.1 now goes through this programme, not through a separate Glasswing partnership.