Category [Product announcements](https://claude.com/blog/category/announcements)Product No items found.Date August 21, 2026Reading time 6 minShare [Copy link](https://claude.com/blog/bringing-claude-mythos-5-to-more-defenders#)https://claude.com/blog/bringing-claude-mythos-5-to-more-defenders
我们在此分享一项最新进展：我们正致力于帮助更多团队将前沿能力用于网络防御。Claude Mythos 5 现已可在 Claude Security 中使用，并将很快集成到合作伙伴的网络防御工具中。同时，我们还启动了 3500 万美元的基金，用于保护开源软件安全，并公布了扩大 Cyber Verification Program 的计划。
今年 4 月，我们推出了 Project Glasswing，将我们最强大的前沿模型 Claude Mythos Preview（及其后继版本 Claude Mythos 5）提供给一小批负责保护全球最关键软件安全的组织使用。这为防御者争取到了一段宝贵的时间窗口，让他们能够在具备类似能力的模型广泛开放或落入恶意行为者手中之前，提前发现并修复漏洞。
我们的目标始终是尽可能安全地将 Mythos 级别的防御能力扩展到更多防御者手中。为此，我们一直在研发安全分类器和防护机制，以便在扩大 Mythos 级模型使用范围的同时，避免其网络攻击能力落入不当之手。Claude Fable 5 是第一步：它让模型得以广泛使用，同时阻止了双重用途的网络相关工作。
今天，我们将迈出下一步。最高风险的行为发生在用户直接访问模型时——恶意行为者可能试图引导模型走向有害用途。但如果用户只能接收特定输出，例如针对某个漏洞的补丁或安全警报，那么风险就会大大降低。我们宣布的这些变更，将让用户获得更多防御性成果的访问权限，同时继续对模型的直接访问保持适当的防护措施：
- 将 Claude Mythos 5 集成到防御者依赖的工具中。我们正在与网络安全技术和服务合作伙伴合作，将 Claude Mythos 5 集成到防御者已在使用的产品和服务中，用于保护其软件安全。
- Claude Security 扫描现已支持 Claude Mythos 5。Claude Enterprise 套餐的客户现在可以在 Claude Security 中运行我们最强大的模型，用它扫描代码库中的安全漏洞并提出补丁建议。
- 提供3500万美元的信用额度用于开源安全。我们的新Defender Advantage基金（0xDAF）将为致力于修复开源项目漏洞、自动化开源软件扫描与修补流程中的部分环节，以及试验新型安全方法的组织提供3500万美元的信用额度。
- 扩大我们的网络验证计划。该计划目前已经为经过审核的防御方在Opus和Sonnet模型上提供降低安全限制的访问权限。未来几周，我们将把该计划扩展至Opus和Sonnet上更广泛的通用双用途能力，随后将开放Mythos级别的访问权限。
我们的目标始终是帮助组织适应随着AI模型日益强大而不断变化的网络安全节奏与需求。我们将继续开发安全防护措施、访问计划与社区支持，使我们最强大的模型能够安全地服务于广泛的个人和组织。
将Mythos集成到现有的网络防御工具中
保护医院、公用事业、金融系统和软件供应链的团队，已经在依赖一整套产品和服务来开展安全运营、事件响应、威胁情报和检测工程。让前沿能力最快触达这些防御方的方式，就是将Mythos级别的模型集成到他们已经在使用的工具中。
我们的许多合作伙伴已经基于Claude Opus构建了网络安全产品，帮助安全团队更快地对警报进行分类、识别威胁并修复漏洞。我们现在正与这些合作伙伴及更多伙伴合作，将Claude Mythos 5构建到他们的产品和服务中，以便他们能够向客户交付Mythos级别的防御成果。
当终端用户使用这些产品之一时，他们并不是直接与 Mythos 交互。相反，他们通过一个专门构建的界面来操作，该界面在后台为特定任务运行 Mythos，并且只接收该产品旨在提供的特定产物。例如，一个用于修复漏洞的工具可能会输出一份建议补丁列表。这个输出将由 Mythos 生成，但用户无法通过提示词让模型去做诸如为某个漏洞开发攻击代码之类的事情。我们和我们的合作伙伴还采取了滥用防范措施，以确保模型保持在预期的使用范围内。
我们在这项工作上还处于早期阶段，并预计它会随着时间推移而扩展。如果您构建安全产品或服务，并希望将 Claude Mythos 5 带给您的客户，您可以在此处登记您的意向。
面向企业客户推出搭载 Claude Mythos 5 的 Claude Security
从今天起，Claude Security 扫描将基于 Claude Mythos 5 运行。Claude Security 会扫描代码库以查找漏洞，并建议补丁供人工审查；该功能目前面向 Claude Enterprise 客户提供公开测试版，使用 Mythos 5 进行扫描将按您现有套餐下的标准 token 用量计费，无需单独附加付费。
企业管理员可以在管理控制台中启用 Claude Security。用户可以从 claude.ai/security 选择使用 Claude Mythos 5 扫描的代码仓库。随后 Claude 会扫描代码库以查找漏洞，并针对每个发现返回 CWE（通用弱点枚举）类别、置信度和严重性评级，以及建议的修复方案。
然后，用户可以在网页端打开 Claude Code 来实施修复。交互式补丁功能使用您组织在 Claude Code 中有权访问的模型。Mythos 扫描本身不会将 Mythos 的访问权限扩展到其他界面。每个补丁在实施前都必须经过人工审查和批准。
Claude Security 使用 Mythos 5 扫描您拥有的代码，并返回详细的发现结果而非原始输出，同时不暴露模型本身。这意味着防御者可以访问 Claude Mythos 5 的能力，而模型本身不会对那些可能滥用它的人开放。
有关 Claude 安全性的更多信息，请参阅我们的入门指南。
推出 Defender Advantage 基金，为开源软件安全保驾护航
全球一些使用最广泛的程序都运行在开源软件之上。然而，这些项目通常由志愿者或非营利基金会维护，他们可能缺乏足够的资源或人员来全面防御针对其项目的攻击。通过 Project Glasswing，我们向开源安全组织提供了 400 万美元的直接捐赠，为该计划中的开源安全基金会提供了额度支持，帮助扫描并修补了广泛使用的项目，并支持了 Akrites 和 Gold Eagle 等协同漏洞修复工作。
我们新设立的 Defender Advantage 基金（0xDAF）在此基础上更进一步，提供 3500 万美元的 Claude 额度，用于支持帮助开源维护者保障其软件安全的组织。资助将聚焦三个领域：修补广泛使用项目中的现存漏洞、以其他项目可复用的方式实现扫描与修补的自动化，以及帮助项目采用更宏大的安全方案，使其能够抵御整类攻击。
我们首先从少量规模较大的试点资助项目入手，以探索哪些做法最有效、最易于规模化推广。我们将在未来几周内公布首批受助方的详细信息。
扩大我们的网络验证计划
迄今为止，我们的网络验证计划已为组织提供在使用 Claude Opus 和 Sonnet 模型时访问双重用途能力的权限。参与该计划的组织所受到的防护措施有所减少，从而最大程度地减少对获准团队在其获授权保护的系统上开展合法网络安全工作的干扰。
未来几周，我们将对该计划进行升级，扩大对 Claude Mythos 的安全访问范围。作为其中一部分，漏洞分类与验证等防御性能力的访问权限将扩展至 Mythos 级模型，同时网络防御者在 Claude Opus 和 Sonnet 级模型上遇到的拦截也将减少。此外，我们正通过 Project Glasswing 继续扩大 Claude Mythos 的访问范围，该项目与美国政府合作伙伴协作，聚焦于满足严格安全控制要求的关键基础设施保护者。
我们将在未来几周公布 Cyber Verification Program 扩展的更多细节。与此同时，我们鼓励所有从事合法网络安全工作的安全团队申请该计划，以获得对 Claude Opus 和 Sonnet 模型的更少安全限制。如果您已注册并通过审核，则无需任何操作；我们会主动与您联系并告知最新进展。
下一步计划
这些举措延续了我们的一贯努力：让更多个人和组织能够使用前沿模型的防御性能力，并支持开源社区强化其项目以抵御攻击。我们将继续与政府合作伙伴、各类组织、开源维护者以及更广泛的行业携手，共同构建当今高性能 AI 模型所要求的有韧性的网络基础设施。
- 申请加入 Cyber Verification Program。
- 登记您对使用 Mythos 构建网络安全产品与服务的兴趣。
- Claude Security 现已面向企业客户提供公开测试版。管理员可在管理控制台中启用 Claude Security。如需完整操作指南，请参阅我们的入门教程。
Category [Product announcements](https://claude.com/blog/category/announcements)Product No items found.Date August 21, 2026Reading time 6 minShare [Copy link](https://claude.com/blog/bringing-claude-mythos-5-to-more-defenders#)https://claude.com/blog/bringing-claude-mythos-5-to-more-defenders
We're sharing an update on our efforts to help more teams use frontier capabilities for cyber defense.Claude Mythos 5is now available inClaude Security, and coming soon to partners' cyber defense tools. We're also launching a $35M fund to help secure open-source software and sharing plans to expand ourCyber Verification Program.
In April, we launched Project Glasswing to put our most capable frontier model, Claude Mythos Preview (and its successor, Claude Mythos 5), in the hands of a small group of organizations securing the world’s most critical software. This gave defenders a window of time to find and fix vulnerabilities ahead of models with similar capabilities becoming generally available or reaching malicious actors.
Our goal has always been to expand Mythos-level defense to as many defenders as we safely can. To do that, we've been working on safety classifiers and safeguards that let us expand access to Mythos-class models without putting their offensive cyber capabilities in the wrong hands. Claude Fable 5 was the first step: it made the model broadly available while blocking dual-use cyber work.
Today, we’re taking the next steps. The riskiest behavior occurs when a user has direct access to a model, where a malicious actor can try to steer it toward harmful uses. But if users can only receive specific outputs, such as a patch for a vulnerability or a security alert, that risk is much lower. The changes we’re announcing give users greater access to the defensive results, while maintaining appropriate guardrails around direct access to the model:
- Claude Mythos 5 integration into the tools defenders rely on. We’re working with our cybersecurity technology and services partners to integrate Claude Mythos 5 into the products and services defenders already use to secure their software.
- Claude Security scans can now run on Claude Mythos 5. Customers on Claude Enterprise plans can now run our most capable model in Claude Security, using it to scan their codebases for security vulnerabilities and suggest patches.
- $35 million in credits for open-source security. Our new Defender Advantage Fund (0xDAF) will provide $35 million in credits to organizations working to patch vulnerabilities in open-source projects, automate parts of the process of scanning and patching open-source software, and experiment with new security approaches.
- Expanding our Cyber Verification Program. The program already gives vetted defenders reduced safeguards on Opus and Sonnet models. In the coming weeks, we will expand this program to include broader dual-use capabilities on Opus and Sonnet, with Mythos-class access to follow.
Our aim remains to help organizations adapt to the pace and demands of cybersecurity as AI models become increasingly powerful. We will continue to develop safeguards, access programs, and community support to make our most capable models safely available to a wide range of people and organizations.
Integrating Mythos into existing cyberdefensive tools
The teams defending hospitals, utilities, financial systems, and the software supply chain already rely on a suite of products and services for security operations, incident response, threat intelligence, and detection engineering. The fastest way to make frontier capabilities available to those defenders is to integrate Mythos-class models into the tools they already run.
Many of our partners have already built cyber products on Claude Opus that help security teams triage alerts, identify threats, and remediate vulnerabilities faster. We’re now working with these partners and more to build Claude Mythos 5 into their products and services, so they can deliver Mythos-level defensive outcomes to their customers.
When an end user uses one of these products, they’re not interacting with Mythos directly. Instead, they work through a purpose-built interface that runs Mythos in the background for a defined task and only receive the specific artifact the product is intended to provide. For example, a tool to remediate vulnerabilities might provide a list of suggested patches as its output. This output would be generated by Mythos, but the user would not have a way to prompt the model to, say, develop an exploit for a vulnerability. We and our partners also have abuse prevention measures in place to verify the model stays within its intended scope.
We're early in this work and expect it to expand over time. If you build security products or services and want to bring Claude Mythos 5 to your customers, you can register your interest here.
Making Claude Security available with Claude Mythos 5 for Enterprise customers
Starting today, Claude Security scans now run on Claude Mythos 5. Claude Security scans codebases for vulnerabilities and suggests patches for human review; it’s currently in public beta for Claude Enterprise customers, and scans with Mythos 5 are billed as standard token usage under your existing plan, with no separate add-on.
Enterprise admins can enable Claude Security in the admin console. From claude.ai/security, users can select a repository to scan using Claude Mythos 5. Claude then scans the codebase for vulnerabilities, and returns each finding with a CWE (Common Weakness Enumeration) category, confidence and severity ratings, and a suggested fix.
Users can then open Claude Code on the web to implement the fix. Interactive patching uses the models your organization has access to in Claude Code. The Mythos scan itself does not extend Mythos access to other surfaces. Every patch must be reviewed and approved by a human before it can be implemented.
Claude Security uses Mythos 5 to scan code you own, and returns detailed findings rather than raw outputs without exposing the model itself. This means defenders can access the capabilities of Claude Mythos 5 without the model becoming accessible to those who might misuse it.
For more about Claude Security, see our guide to getting started.
Launching the Defender Advantage Fund to secure open-source software
Some of the world’s most widely used programs run on open-source software. Yet these projects are often maintained by volunteers or nonprofit foundations, who may lack the resources or personnel to comprehensively defend their projects against attack. Through Project Glasswing, we made $4M in direct donations to open-source security organizations, provided credits to the open-source security foundations in the program, helped scan and patch widely used projects, and support coordinated vulnerability-fixing efforts like Akrites and Gold Eagle.
Our new Defender Advantage Fund (0xDAF) builds on that work with $35 million in Claude credits for organizations helping open-source maintainers secure their software. Grants will focus on three areas: patching live vulnerabilities in widely used projects, automating scanning and patching in ways other projects can replicate, and helping projects pursue more ambitious security approaches that make them resistant to whole classes of attack.
We're starting with a small number of larger, pilot grants to learn what works and scales best. We will share details on initial recipients in the coming weeks.
Expanding our Cyber Verification Program
To date, our Cyber Verification Program has provided organizations with access to dual-use capabilities when using Claude Opus and Sonnet models. Organizations in the program experience reduced safeguards, minimizing interruptions for accepted teams doing legitimate cybersecurity work on systems they’re authorized to protect.
Over the coming weeks, we are evolving the program to expand safeguarded access to Claude Mythos. As part of this, access to defensive capabilities like vulnerability triaging and validation will expand to Mythos-class models, and cyber defenders will see reduced blocks on Claude Opus and Sonnet-class models. Additionally, we are continuing to expand access to Claude Mythos through Project Glasswing in collaboration with our partners in the U.S. Government, focused on protectors of critically important infrastructure that meet strict security control requirements.
We'll share more details about the Cyber Verification Program expansion in the coming weeks. In the meantime, we encourage all security teams performing legitimate cybersecurity work to apply for the program for reduced safeguards on Claude Opus and Sonnet models. If you are already enrolled and accepted, no action is needed; we’ll reach out with updates.
What’s next
These initiatives are a continuation of our efforts to make the defensive capabilities of frontier models available to more people and organizations, and to support the open-source community in hardening their projects against attack. We will continue to work with government partners, organizations, open-source maintainers, and the broader industry to build the resilient cyber infrastructure today’s highly capable AI models demand.
- Apply for the Cyber Verification Program.
- Register your interest in building cyber products and offerings with Mythos.
- Claude Security is available in public beta for Enterprise customers. Admins can enable Claude Security in the admin console. For a full walkthrough, see our guide to getting started.