Expanding the Reach of Project Glasswing
Anthropic has significantly broadened the scope of Project Glasswing, its collaborative AI-driven cybersecurity initiative, by granting access to Claude Mythos Preview for approximately 150 new organizations. This expansion follows several weeks of close work with existing partners, security industry leaders, open-source software maintainers, and the US government. The project was first announced in early April 2026, when about 50 initial partner organizations began using Claude Mythos Preview to scan their codebases for security vulnerabilities, collectively identifying more than 10,000 high-severity or critical flaws.
The newly onboarded organizations span over fifteen countries, with most providing critical infrastructure services that extend beyond their home nations. Industries that were underrepresented in the initial group, including power, water, healthcare, communications, and hardware, are now part of the program. A substantial portion of the new partners are vendors and nonprofits that maintain widely used codebases relied upon by other organizations globally, including national governments.
Broader Defensive Use and Industry Implications
Beyond vulnerability detection, partners are now deploying Claude Mythos Preview across a wider range of defensive tasks. These include automated patch writing, pre-release security checks to prevent vulnerabilities from entering production, penetration testing simulations, threat detection and response automation, and rebuilding legacy codebases in memory-safe languages. Anthropic estimates that for most Project Glasswing partners, a successful cyberattack on their codebase could affect more than 100 million people, with significant consequences for global and national security. Each new organization must meet Anthropic’s security requirements before receiving access to the models.
Mythos Preview also serves as a critical warning for the industry. Anthropic projects that within six to twelve months, competing AI companies will develop similar models, potentially releasing them without adequate safeguards to prevent offensive misuse. This timeline creates an urgent window for cyberdefenders to adapt their tooling and operational practices before such capabilities become widely available to adversaries.
Source: Cyber Security News
