Anthropic Expands Cyber Verification Program, Empowering Defenders with Advanced AI Access

Anthropic has announced a major expansion of its Cyber Verification Program (CVP), integrating it with Project Glasswing into a unified, three-tiered access system. This program grants verified cybersecurity professionals reduced restrictions when using Anthropic's advanced AI models, including Claude Opus 5.5, Sonnet 5.5, and Mythos 5.1, for defensive security tasks. The tiers include 'Defense Access' for incident investigation and vulnerability analysis, 'Red Team Access' for authorized penetration testing, and 'Specialized Access' for a select group testing high-risk systems like power grids and flight operating systems. This expansion is significant for cybersecurity practitioners because it directly addresses the challenge of leveraging powerful AI for defense without encountering overly restrictive safeguards designed for general use. By providing tailored access, Anthropic is enabling security teams to more effectively utilize AI for tasks such as identifying and analyzing malware, uncovering software vulnerabilities, and conducting simulated attacks. The program's previous iteration, Project Glasswing, reportedly helped uncover over 129,000 verified software vulnerabilities between April and July 2026, with over 33,000 rated as critical or high severity, demonstrating the tangible impact of AI in vulnerability discovery. The move aligns with a broader trend in cloud and DevOps security where AI is increasingly seen as a force multiplier for defenders. As AI-generated code becomes more prevalent and attackers leverage AI for more sophisticated threats, security teams need equally advanced tools to keep pace. This initiative from Anthropic reflects the industry's growing recognition that AI, while a potential risk in the wrong hands, is also an indispensable asset for proactive defense. Other developments, such as GitLab integrating Anthropic's models for vulnerability identification within its security flows, further underscore this trend. In practice, this means security professionals should consider applying for the CVP to gain access to these enhanced AI capabilities. Organizations can leverage these models to augment their existing security operations, potentially reducing the time and resources required for vulnerability assessments and incident response. However, practitioners must also remain aware of the inherent risks and ethical considerations of using powerful AI, even for defensive purposes. The program's data retention requirements for misuse monitoring highlight the ongoing need for responsible AI deployment and oversight.