17JUL

Anthropic withholds Mythos from public release

2 min read

14:01UTC

Anthropic's most capable model scored 83.1% on vulnerability reproduction but will not be released publicly, going instead to twelve partners through a $100 million restricted programme.

← Back to Fed hedges as four banks cut headcount Jump to analysis ↓

EconomicDeveloping

Key takeaway

Anthropic set the precedent for withholding a frontier model from public release over systemic risk.

Anthropic released Claude Mythos Preview exclusively to twelve partner organisations through Project Glasswing on 8 April 2026, backed by $100 million in model usage credits ¹. The model autonomously identified thousands of zero-day vulnerabilities across every major operating system and browser, including a 27-year-old OpenBSD flaw that had survived five million automated tests. On the CyberGym benchmark it scored 83.1% on vulnerability reproduction, compared with 66.6% for Anthropic's previous top model.

Anthropic has explicitly stated it will not release Mythos to the public. The twelve Glasswing partners include AWS, Apple, Google, Microsoft, CrowdStrike, Palo Alto Networks, and JPMorgan. Goldman Sachs, another partner, published displacement research the same week showing AI substitutes 25,000 jobs per month , placing these institutions on both sides of the AI capability and labour displacement story.

A Tom's Hardware review challenged the marketing: the "thousands" claim rested on only 198 manual reviews, and many flagged flaws were in outdated software ². The Bessent-Powell emergency meeting suggests federal regulators took the risk seriously regardless.

Deep Analysis

In plain English

Every major AI model so far has been made available to the public, either free or via subscription. Anthropic has broken that pattern. Claude Mythos Preview is restricted to twelve partner organisations, including tech giants and financial institutions. The model can automatically find previously unknown security flaws in software at a scale that has never been seen from an AI system. Anthropic's position is that the capability is powerful enough that releasing it widely would create unacceptable risk, the same software that makes it useful to defenders could be used by attackers. So it is being distributed under a controlled programme called Project Glasswing, with $100 million in subsidised usage credits. A technical review by Tom's Hardware found that some of the specific claims were overstated, but the underlying capability gap the model represents is real.

Deep Analysis

Root Causes

Anthropic's capability assessment rests on the CyberGym benchmark jump from 66.6% to 83.1%, a 16.5-percentage-point improvement in autonomous vulnerability reproduction. Anthropic's own research on 'observed exposure' shows computer programmers face 75% task coverage from Claude-class models; Mythos's security capabilities represent the first instance where the coverage figure has operational implications beyond individual productivity.

The restriction decision reflects Anthropic's founding premise that AI safety and capability development must remain linked. Project Glasswing's $100 million credit allocation is structured as a subsidy for defensive deployment, not a commercial launch, which is itself novel for a frontier model.

What could happen next?

Precedent
The first frontier AI model explicitly withheld from public release establishes capability-gating as a legitimate deployment option for safety-constrained AI systems.
Medium term · 0.85
Risk
The twelve Glasswing partners, which include both defensive (CrowdStrike, Palo Alto) and dual-use (AWS, Google, Microsoft) organisations, may deploy Mythos capabilities in ways beyond Anthropic's stated defensive intent.
Short term · 0.62
Opportunity
Security professionals who can interpret and direct AI-identified vulnerability data at scale represent a new premium-tier role the model creates even as it automates routine scanning.
Medium term · 0.71

Source Landscape

Primary parallel: The 1975 Asilomar conference, at which biologists voluntarily halted recombinant DNA research pending safety framework development. The moratorium held for roughly 18 months before guidelines were agreed and research resumed. The parallel is structural: a field self-imposing limits on a capability it had just demonstrated, pending institutional capacity to manage the risk.

Counter-parallel: The US government's 1994 restrictions on strong encryption export, which attempted to control dual-use cryptographic capabilities. Within five years, equivalent encryption was globally available and the restrictions collapsed. Technical capability restrictions at the frontier tend not to hold against commercial and geopolitical pressure.

Consensus view: The Carnegie Endowment for International Peace's Jon Bateman and the Royal United Services Institute's Tim Stevens assess the Glasswing structure as the first operationally significant instance of capability-gated AI deployment, where the developer, not a regulator, restricts access based on dual-use risk assessment.

Counter-view: Chinese cybersecurity researchers at the Institute of Information Engineering (Chinese Academy of Sciences) have noted that restricting Mythos to Western tech and financial partners accelerates an offensive capability gap that adversarial states will close through their own development, without the safety constraints Anthropic has imposed on its own model.

Key tension: Whether Anthropic's voluntary capability gating sets a durable precedent for responsible frontier AI deployment, or simply buys time before equivalent capabilities emerge from actors with no interest in gating.

Sources:Anthropic

Mentions:Goldman Sachs →Carnegie Endowment for International Peace →Prima →Project Glasswing →Anthropic →Claude Mythos Preview →Amazon →Apple →Google →Microsoft →CrowdStrike →Palo Alto Networks →CyberGym →RUSI →JPMorgan Chase →

First Reported In

Update #5 · The model they won't release

Anthropic· 10 Apr 2026

Read original →

Causes and effects

This Event

Anthropic withholds Mythos from public release

The first frontier AI model deliberately withheld from public deployment establishes a precedent for capability-gated release in the industry.

Led to

Anthropic drops ASL, expands Glasswing partners

Anthropic's 7 April system card and Glasswing expansion directly extended the Glasswing programme launched on 8 April with the original twelve partners.

Occurred 7 Apr 2026

Read story →

Dimon: JPMorgan displaced workers from AI

JPMorgan is one of the original twelve Glasswing partners, creating the contradiction of a bank attending emergency Treasury meetings about AI risk while internally displacing staff through AI deployment.

Occurred 24 Feb 2026

Read story →

Different Perspectives

Stanford's 'We Must Act Now' signatories

More than 200 academics, including 16 Nobel laureates, published a 13 July letter warning of AI-driven labour disruption, citing Daron Acemoglu's NBER estimate that AI's total factor productivity gain stays under 0.66% over ten years. The letter's own cited economics sit well below Goldman Sachs Research's 1.5-percentage-point estimate published the same week.

Germany / the Bundesrat

Germany's Bundesrat acted on the EU AI Act's employment provisions on 10 July, more than a year ahead of the Act's 2 December 2027 enforcement deadline. Germany is moving on statutory AI-employment disclosure while the US Congress and Federal Reserve have no equivalent instrument.

Indian IT services sector (TCS, HCLTech, Wipro)

TCS cut 19,271 roles and HCLTech cut 3,292 in the same reporting week that Wipro's headcount rose by 888 under its own zero-fresher-hiring pledge for FY27. The divergence shows attrition, not layoffs, is how India's outsourcers absorb AI-driven project compression while their net headcount numbers stay ambiguous.

Federal Reserve

Barr said on 14 July there is little evidence of AI displacement, citing a 43-versus-10 adoption gap by education; Cook said the next day the dire predictions have not come to fruition, her text carrying none of the bond-spread language she used in May. The Fed reads AI's labour effect through national aggregates, where four banks' cuts remain statistically invisible.

Barclays

Barclays economist Pooja Sriram flagged a 28,000-a-month bleed in finance and information roles the same week Microsoft disputed that AI drove its own 4,800 cuts. The bank treats Challenger's AI-attribution share as a lagging indicator against faster erosion visible in raw labour-market data.

European Commission

Brussels deferred the Digital Omnibus's Annex III employment-compliance deadline from 2 August 2026 to December 2027, even as California advanced three binding AI-hiring bills the same week. The 17-month delay leaves EU workers without the algorithmic-hiring safeguards the regulation already promises.