Anthropic expanded its Cyber Verification Program into three access tiers. Defense Access covers defensive work like incident response and vulnerability analysis. Red Team Access adds authorized penetration testing and red-teaming. Specialized Access offers the fewest blocks for testing high-risk systems. Each tier includes access to Claude Opus 5.5, Sonnet 5.5, Mythos 5.1 and future models. Existing Project Glasswing members transition to Specialized Access. Applications for Defense Access are reviewed in days. Red Team Access reviews take weeks. Specialized Access requires US government collaboration. Data retention is mandatory until Enterprise Frontier Safeguards launches later this fall. CVP is available on Claude Platform, Google Cloud Vertex AI, and Microsoft Foundry. Amazon Bedrock access is limited to Enterprise Frontier Safeguards-eligible customers.
What changed
Two separate programs (Project Glasswing and CVP) with limited access to reduced safeguards.
What it unlocks
Security teams can now apply for tiered access to advanced cyber capabilities with reduced blocking classifiers.
- 3 access tiers
- 46 of 50 tasks blocked in Defense Access
- 34 of 50 tasks completed in Red Team Access
- 129,000+ verified vulnerabilities found via Project Glasswing (Apr-Jul 2026)
What you need to act on it
- qualifying security professional status
- verification and proof of security controls
- data retention compliance (until Enterprise Frontier Safeguards launch)
Sources