Anthropic on Tuesday announced a revamped Cyber Verification Program (CVP), integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI models.
Anthropic’s generally available models, including Claude Opus 5.5, Sonnet 5.5 and Fable 5.1, ship with cyber safeguards that block most cyber work. The company says this is because the same capabilities that help defenders find and fix flaws can also help attackers exploit them.
Until now, CVP and Glasswing ran as separate programs: Glasswing gave organizations securing critical software access to Claude Mythos, while the original CVP loosened safeguards on Opus and Sonnet models for approved teams.
Under the new structure, all three tiers include Opus 5.5, Sonnet 5.5, Mythos 5.1 and future models. Each tier comes with its own verification requirements and security controls.
The Defense Access tier covers SOC and incident response work, malware reverse engineering, and vulnerability analysis and validation. Eligible applicants include security teams defending their own systems, critical infrastructure operators, small security firms, open source maintainers, and individual researchers with a history of reported vulnerabilities. Anthropic aims to respond to these applications within a few days.
Red Team Access adds authorized penetration testing and red teaming, limited to systems the organization is permitted to test. Actions that could cause physical harm or mass disruption, such as deploying ransomware, are still blocked in real time.
“Currently, this tier is for organizations only; individual researchers are not eligible,” Anthropic said. Reviews are expected to take a few weeks, and qualifying applicants get Defense Access in the meantime.