Expanding the Cyber Verification Program Announcements Oct 6, 2026 We’re launching a new, expanded version of our Cyber Verification Program, which makes advanced cyber capabilities and reduced blocking classifiers available to qualifying security professionals.

THE NEWS

What happened

Anthropic expands its Cyber Verification Program (CVP) into a unified offering with three new access tiers: Defense Access, Red Team Access, and Specialized Access. This update integrates the previous Project Glasswing program, granting vetted security professionals reduced blocking classifiers on advanced models like Claude Opus 5.5 and Claude Mythos 5.1 to better defend critical infrastructure. The expansion aims to provide defenders with the necessary tools to identify vulnerabilities while maintaining safety controls against mass disruption.

CONTEXT

Why it matters

Anthropic has officially expanded its Cyber Verification Program (CVP), merging Project Glasswing into a unified system with three distinct access tiers: Defense Access, Red Team Access, and Specialized Access. This move allows qualified security professionals and organizations to access advanced AI models with reduced blocking classifiers, essential for reverse-engineering malware and authorized penetration testing. The program aims to give defenders a significant advantage in securing critical infrastructure while maintaining strict safety controls against mass disruption. Existing partners have already identified over 129,000 verified vulnerabilities using these tools.

AT A GLANCE

Key facts

• Anthropic launches an expanded Cyber Verification Program (CVP) integrating Project Glasswing.
• Three new access tiers are introduced: Defense Access, Red Team Access, and Specialized Access.
• Access grants reduced blocking classifiers on models including Claude Opus 5.5, Sonnet 5.5, and Mythos 5.1.
• Defense Access allows SOC and incident response tasks for companies, critical infrastructure operators, and researchers.
• Red Team Access permits authorized penetration testing but retains blocks on actions causing physical harm or mass disruption.
• Specialized Access is reserved for organizations testing safety systems impacting lives or markets (e.g., power grids, flight systems).
• Partners using Project Glasswing found at least 129,000 verified software vulnerabilities between April and July 2026.
• CVP is available on the Claude Platform, Google Cloud Vertex AI, Microsoft Foundry, and Amazon Bedrock (with EFS).
• Data retention is currently required for monitoring; Enterprise Frontier Safeguards (EFS) will offer zero-retention options later in 2026.
• Evaluation shows Defense Access blocks 46 of 50 complex cyber tasks, while Red Team Access allows completion of 34.