Anthropic is expanding a programme that allows vetted cybersecurity professionals to test its most powerful AI models with fewer safeguards , after its Project Glasswing initiative helped uncover more than 100,000 software vulnerabilities this year.
The revamped Cyber Verification Program, or CVP, announced on Tuesday combines two programmes Anthropic has run for the past six months.
Security teams, critical infrastructure operators, open-source maintainers and researchers with a record of reported vulnerabilities can apply. The first, Glasswing, gave organisations securing critical software access to Claude Mythos, Anthropic’s most cyber-capable family of models. The second, the original CVP, gave vetted security teams reduced safeguards on Claude Opus and Sonnet models. The company’s April unveiling of Claude Mythos Preview raised fears that AI could hack software before it had been secured. The new programme has three tiers, each with its own verification requirements and security controls. The Defense tier covers work such as incident response and malware analysis. The Red Team tier adds authorised penetration testing and red-teaming, but only organisations can apply. The Specialized tier has the fewest restrictions and is reserved for a small group of organisations authorised to test safety-critical systems such as power grids, flight systems and interbank transfer infrastructure. Anthropic vets each member together with the US government, and existing Glasswing members will move into this tier.
Its partners under Glasswing, an initiative aimed at securing the world’s most critical software, found at least 129,000 verified vulnerabilities between April and July. Anthropic’s own open-source scanning found 5,500 more between April and October. More than 33,000 have so far been rated critical or high severity. All three include access to Claude Opus 5.5, Sonnet 5.5, Mythos 5.1 and future models.
Anthropic said the figures are likely an undercount and expects the true impact to be at least five times higher, as the data comes from a survey of a limited number of partners.
