Anthropic Opens Its Most Powerful AI to More Security Defenders and Puts $35 Million Behind Open-Source Safety
The company behind the Claude AI system is carefully widening access to its strongest models for cybersecurity work, while keeping ordinary users and criminals locked out.
Key points
- Anthropic is giving vetted cybersecurity teams access to Claude Mythos 5, its most capable AI model, through controlled partner tools rather than direct access.
- A new $35 million fund, called the Defender Advantage Fund (0xDAF), will send money as computing credits to organisations protecting open-source software.
- Claude Security, a code-scanning tool for business customers, now runs on Mythos 5 and flags security weaknesses with severity ratings and suggested fixes.
- Anthropic's Cyber Verification Program, which relaxes some AI restrictions for authorised security professionals, will expand its permissions in the coming weeks.
- The company says the riskiest scenario is giving anyone unrestricted access to a powerful AI; its strategy is to return only specific, useful outputs instead.
Anthropics's Claude AI system is not one thing. It is a family of models at different power levels, and the company has spent months deciding who gets to touch the strongest ones.
What is Anthropic actually doing here?
Defenders, meaning the security professionals who find and fix flaws before criminals exploit them, are getting broader access to Mythos 5, Anthropic's most capable model. But they will never talk to it directly.
Instead, security tools built by Anthropic's partners will run Mythos 5 quietly in the background and hand back a specific, limited result: a list of suggested patches, say, or a flagged piece of risky code. The criminal sitting at home cannot replicate that by signing up for an account, because the model itself is never exposed. Only the answer comes out.
Anthropics calls this the key insight behind everything it announced. Unrestricted access to a powerful AI is dangerous. Receiving a narrowly defined output from that same AI is far less so.
Who benefits, and how?
Four groups stand to gain from the changes announced this week.
| Beneficiary | What they get | Detail |
|---|---|---|
| Security operations teams | Mythos 5 embedded in existing tools | Covers hospitals, utilities, financial systems, software supply chains |
| Claude Enterprise customers | Upgraded Claude Security code scanner | Finds weaknesses by CWE category (a standard classification of software flaw types), with severity ratings and fix suggestions |
| Open-source maintainers | $35 million in computing credits via 0xDAF | Grants target live vulnerability fixes and reusable scanning processes |
| Vetted security researchers | Expanded Cyber Verification Program | Broader permissions on Claude Opus and Sonnet models, Mythos access to follow |
The Claude Security scanner is worth pausing on. It reads code that a company owns, flags each problem with a confidence score and a suggested repair, and stops there. A human must review and approve any fix before it goes anywhere near live systems. The model never generates raw, unchecked output that someone could redirect for harm.
Should ordinary people care about any of this?
Most people will never interact with these tools. The direct effect lands on IT and security teams.
That said, the hospitals, water utilities, and financial institutions protected by these tools serve everyone. Faster detection of software flaws in those systems means fewer incidents that leak patient records, knock out services, or freeze bank accounts. The trickle-down is real, even if it is slow.
For anyone who works at an organisation with a security team: your colleagues may soon be using AI-assisted scanning tools powered by models like Mythos 5. That is worth knowing when your IT department asks you to apply an urgent software update. The advice behind that request may have come, in part, from an AI that spotted the flaw first.
The Cyber Verification Program is currently accepting applications from security professionals who want reduced AI restrictions for legitimate research work. Anthropic says further details on the wider rollout are coming in the next few weeks.
