Three access levels

Anthropic has combined Project Glasswing and its previous Cyber Verification Program into a new three-tier structure. Defense Access covers incident response, malware analysis and vulnerability work. Red Team Access adds authorized penetration testing for organizations. Specialized Access, with the fewest cyber blocks, is reserved for a limited set of verified organizations testing critical systems such as power, telecom and financial infrastructure.

Applications are open, with proof of authorization and security controls required. The program is available through Claude Platform, Google Cloud Vertex AI and Microsoft Foundry; Amazon Bedrock has additional eligibility conditions. Data retention is required for most participants, although some previously approved zero-retention configurations can continue under stated conditions.

Vulnerability-discovery results

Anthropic reports that Glasswing partners found at least 129,000 confirmed vulnerabilities from April to July 2026. Its own open-source scanning added another 5,500 by October. More than 33,000 findings were classified as critical or high severity. The company notes that the dataset is incomplete and combines different collection methods.

Sources