{"id":865,"date":"2026-08-25T21:32:24","date_gmt":"2026-08-25T21:32:24","guid":{"rendered":"https:\/\/localseobot.ai\/blog\/anthropic-expands-mythos-5-access-to-more-defenders-unveils-35m-open-source-fund\/"},"modified":"2026-10-31T08:14:22","modified_gmt":"2026-10-31T08:14:22","slug":"anthropic-expands-mythos-5-access-to-more-defenders-unveils-35m-open-source-fund","status":"publish","type":"post","link":"https:\/\/localseobot.ai\/blog\/anthropic-expands-mythos-5-access-to-more-defenders-unveils-35m-open-source-fund\/","title":{"rendered":"Anthropic Expands Mythos 5 Access to More Defenders, Unveils $35M Open Source Fund"},"content":{"rendered":"
Updated October 31, 2026 at 4:11 AM ET<\/em><\/div>\n

Anthropic is expanding Mythos 5 access for more defenders, adding a $35 million open source security fund and reporting at least 134,500 verified software vulnerabilities found through Cyber Verification Program partners and Anthropic\u2019s own scanning.<\/p>\n

What happened<\/h2>\n

SecurityWeek reported<\/a> that Anthropic is broadening access to its cybersecurity models through partner integrations, an updated Claude Security offering, a new open source funding program and an expanded Cyber Verification Program. The move builds on Project Glasswing, launched in April, which gave a small group of organizations early access to Claude Mythos Preview and its successor, Mythos 5.<\/p>\n

On October 6, Anthropic said it had launched an expanded, three-tier version of its Cyber Verification Program. Each tier gives qualifying security teams access to advanced cyber capabilities and reduced blocking classifiers, with access extending to Claude Opus 5.5, Claude Sonnet 5.5 and Claude Mythos 5.1, as well as new models.<\/p>\n

Are you affected?<\/h2>\n

The direct access expansion applies to qualifying security professionals and security teams that apply for a Cyber Verification Program tier. Anthropic has published an application route, while the announcement does not list eligibility requirements or say that every local business can obtain direct access.<\/p>\n

Claude Security is in public beta for Claude Enterprise customers. Its codebase scans now use Mythos 5, but Anthropic has not stated that the beta is available to every local business or listed public-beta eligibility rules beyond the Claude Enterprise customer requirement.<\/p>\n

Anthropic said partner tools will run it in the background and return defined defensive outputs, such as suggested patches or security alerts, with abuse-prevention checks. For a local business, the practical question is whether one of its website, security or software providers has connected either Mythos 5 or Claude Security to the systems that manage its site. The source does not name those providers or list affected software versions.<\/p>\n

What to do now<\/h2>\n
    \n
  1. \n

    Ask the company or agency responsible for the business website whether it uses Claude Security, Mythos 5-backed scanning or a partner-built security interface.<\/p>\n<\/li>\n

  2. \n

    Review any proposed code findings with the affected service, paying attention to the CWE category, confidence rating and severity shown for each item.<\/p>\n<\/li>\n

  3. \n

    Require a human to review and approve each proposed fix before it is deployed through Claude Code.<\/p>\n<\/li>\n

  4. \n

    For teams with qualified security needs, review Anthropic\u2019s Cyber Verification Program application information<\/a> and the access tier that matches the work.<\/p>\n<\/li>\n

  5. \n

    Check that any open source software used by the website, booking system, payment provider or other business tool receives regular vulnerability scanning.<\/p>\n<\/li>\n<\/ol>\n

    What does this mean for a local business website?<\/h2>\n

    It expands a specialist security workflow built around three controls: restricted model access, defined outputs and human approval before deployment.<\/p>\n

    A flagged weakness can surface as a CWE category, confidence rating, severity rating and suggested fix. The code change still needs a person to review and approve it through Claude Code.<\/p>\n

    Anthropic said the early access program was designed to give defenders time to find and fix vulnerabilities before comparable capabilities became widely available or reached malicious actors. It also said its broadly available Claude Fable 5 model keeps dual-use cyber work blocked.<\/p>\n

    How are partners integrating Mythos 5?<\/h2>\n

    Anthropic is working with cybersecurity partners to incorporate Mythos 5 into security operations, incident response and detection tools used by organizations protecting hospitals, utilities, financial systems and the software supply chain.<\/p>\n

    These interfaces run the model in the background and return a defined result, such as a list of suggested patches. Anthropic says abuse-prevention checks are intended to keep each use within its approved scope.<\/p>\n

    What is new in Claude Security?<\/h2>\n

    Claude Security, currently in public beta for Claude Enterprise customers, runs its codebase scans on Mythos 5. Each finding includes a CWE category, confidence and severity ratings, and a suggested fix. Anthropic still requires the fix to be implemented through Claude Code and approved by a human before deployment.<\/p>\n

    Treat proposed website changes as items for human review before deployment.<\/p>\n

    What does the $35 million fund cover?<\/h2>\n

    Anthropic also announced a $35 million open source security fund.<\/p>\n

    What did the Cyber Verification Program find?<\/h2>\n

    The reported results give context for the expansion. Anthropic said CVP partners found at least 129,000 verified software vulnerabilities from April through July 2026. The company\u2019s own open source scanning found an additional 5,500 verified vulnerabilities from April through October 2026.<\/p>\n

    More than 33,000 of the verified vulnerabilities had been rated critical or high severity at the time of the announcement. Anthropic said this was likely an undercount because the figure came from survey data covering only a subset of Glasswing partners. The company expected the true impact to be at least five times higher.<\/p>\n

    FAQ<\/h2>\n

    What is Mythos 5?<\/h3>\n

    Mythos 5 is the successor to Claude Mythos Preview, part of Anthropic\u2019s Mythos-class AI line introduced through Project Glasswing in April. It is offered to defenders through partner integrations and the Claude Security beta rather than through direct, unrestricted user access.<\/p>\n

    How much money is Anthropic putting into open source security?<\/h3>\n

    Anthropic announced a $35 million open source security fund to support projects that identify and remediate vulnerabilities in open source software. The company described it as the largest fund of its kind.<\/p>\n

    What is new in the Claude Security beta?<\/h3>\n

    Claude Security, in public beta for Claude Enterprise customers, now runs its codebase scans on Mythos 5. Each finding includes a CWE category, confidence and severity ratings, and a suggested fix, with implementation routed through Claude Code and requiring human approval before deployment.<\/p>\n

    This article reports on publicly available information from the sources listed below. We have no reason to believe it is inaccurate, but we have not independently verified every claim, and details may change as the story develops.<\/em><\/div>\n
    \n

    Sources<\/h2>\n