Anthropic has unveiled Project Glasswing, a large-scale cybersecurity initiative bringing together major technology and financial firms to use advanced AI models for defensive security. The project includes partners such as Amazon Web Services, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, Microsoft, Nvidia, and Palo Alto Networks. At its core is Claude Mythos Preview, an unreleased AI model that Anthropic says can identify and exploit software vulnerabilities at a level exceeding most human experts.
The initiative reflects growing concern that AI-driven cyber capabilities are advancing faster than existing defenses. According to Anthropic, Mythos Preview has already identified thousands of high-severity vulnerabilities across widely used systems, including operating systems, web browsers, and open-source infrastructure. In some cases, the model uncovered flaws that had remained undetected for decades, such as vulnerabilities in OpenBSD, FFmpeg, and the Linux kernel. Many of these issues have since been patched after disclosure to maintainers.
Project Glasswing aims to ensure these capabilities are used defensively. Participating organizations will deploy the model to scan their own systems and critical infrastructure, while Anthropic shares findings across the broader ecosystem. The company is committing up to $100 million in usage credits for the model, along with $4 million in direct funding for open-source security efforts. Access has also been extended to more than 40 additional organizations responsible for maintaining key software systems.
The urgency behind the effort stems from a shift in how vulnerabilities are discovered and exploited. Tasks that once required highly specialized expertise can now be automated by AI systems with advanced reasoning and coding abilities. Anthropic warns that the gap between vulnerability discovery and exploitation is shrinking rapidly, increasing the risk of widespread cyberattacks. The global cost of cybercrime is already estimated at around $500 billion annually, with threats ranging from attacks on hospitals and infrastructure to state-sponsored operations targeting national security systems.
Turning Offensive Capabilities Into Defense
Claude Mythos Preview represents a new class of AI systems capable of autonomously identifying and chaining together vulnerabilities to create sophisticated exploits. While this raises concerns about misuse, it also offers a powerful tool for defenders. By deploying the model proactively, organizations can identify and fix weaknesses before they are exploited.
Early testing by partners suggests the model can analyze complex codebases, perform penetration testing, and uncover vulnerabilities missed by traditional tools. Anthropic said it does not plan to release the model publicly, citing safety risks, but intends to develop safeguards that could enable broader deployment of similar systems in the future.
Industry-Wide Collaboration
Project Glasswing underscores the need for coordinated action across the technology industry. No single company can address the risks posed by AI-driven cyber threats alone, particularly as critical infrastructure increasingly depends on shared software components and open-source code.
The initiative also points to evolving cybersecurity practices. Anthropic and its partners plan to develop recommendations covering vulnerability disclosure, software updates, supply chain security, and automated patching. Governments are expected to play a role as well, particularly given the national security implications of advanced cyber capabilities.
As AI continues to reshape both offensive and defensive cybersecurity, Glasswing represents an early attempt to tip the balance in favor of defenders. Whether it succeeds may depend on how quickly the broader ecosystem adapts to a rapidly changing threat landscape.