Anthropic announces expanded three-tier Cyber Verification Program, merging Project Glasswing and prior CVP
Anthropic Expands Cyber Verification Program to Three Tiers
The program gives vetted security teams access to AI capabilities that are otherwise blocked for dual-use offensive tasks, while keeping a hard floor on prohibited uses like ransomware development and mass data exfiltration. Partner organizations in the predecessor Project Glasswing identified at least 129,000 verified software vulnerabilities between April and July 2026, more than 33,000 of which were rated critical- or high-severity.
The full picture
Anthropic has restructured its Cyber Verification Program (CVP) into three tiers, Defense Access, Red Team Access, and Specialized Access, consolidating its prior CVP and Project Glasswing into a single program. Verified security professionals gain reduced AI safeguards on Claude Opus 5.5, Sonnet 5.5, Mythos 5.1, and Fable 5.1 for legitimate defensive and offensive cybersecurity work such as penetration testing, vulnerability research, and red-teaming. Individuals may only apply for the Defense Access tier and must be on a paid plan; the Red Team and Specialized Access tiers are open to organizations only. Anthropic considers the nature of the organization's work, its ability to verify identity, the legal and regulatory environment, and risk of diversion when evaluating applicants, and takes a more cautious approach for organizations primarily serving military, intelligence, or law enforcement customers. A single organization application places the applicant at the highest tier the submitted information supports, with responses targeted within seven business days. The program is available on the Claude Platform, Google Cloud Vertex AI, and Microsoft Foundry, with Amazon Bedrock access limited to Enterprise Frontier Safeguards-eligible customers.
How it developed
Sources
Related
- Grew out ofAI recursive self-improvement across major labs
- Continues inAnthropic's GLM-5.3 exploit capability report
Want this in your inbox?
I send one email each morning with the stories that moved. If you would rather just read here, that works too.
Subscribe free