Project Glasswing

Anthropic is expanding its Cyber Verification Program (CVP) to a much larger pool of vetted security professionals, giving them access to Claude's most powerful models with reduced safety filters. Access is split into three tiers: Defense, Red Team, and Specialized. Anthropic claims partners in its predecessor program, Project Glasswing, found at least 129,000 confirmed vulnerabilities between April and July 2026.

HackerOne's Project Glasswing ran Anthropic's Claude Mythos 5 against its production codebase for 30 days, surfacing a critical remote code execution vulnerability that emerged only when three separately safe commits combined. The exercise revealed both the model's expanded detection capability and the operational bottleneck of validating and remediating what it finds.