TL;DR
Anthropic is expanding Project Glasswing from an initial group of about 50 partners to roughly 150 additional organizations. The move follows reports that early partners using Claude Mythos Preview found more than 10,000 high- or critical-severity flaws, shifting the pressure from detection to verification, disclosure, patching and deployment.
Anthropic is expanding Project Glasswing to roughly 150 additional organizations after an initial group of about 50 partners found more than 10,000 high- or critical-severity software flaws, according to source material from Thorsten Meyer AI. The expansion matters because Anthropic is shifting the effort from finding vulnerabilities at scale to helping organizations verify, disclose, patch and deploy fixes before similar AI capabilities spread more widely.
Project Glasswing is described as Anthropic’s collaborative effort to secure high-value software systems. In early April, about 50 initial partners received access to Claude Mythos Preview and began scanning their codebases for vulnerabilities. Those partners later reported finding more than 10,000 high- or critical-severity flaws.
The new group is expected to include organizations in more than 15 countries, with added representation from power, water, healthcare, communications, hardware and software-vendor sectors. According to the source material, many of the partners operate systems where a successful attack could affect more than 100 million people or carry national-security implications.
Anthropic is also placing more focus on work that follows detection. The source material says partners are using Mythos-class models to write patches, run pre-release checks, support penetration testing and rebuild some legacy code in memory-safe languages. Anthropic is also said to be discussing wider open-source vulnerability review and patching, along with disclosure practices meant to help maintainers handle AI-found reports.
The bottleneck moved — from finding flaws to fixing them
50 partners found 10,000+ critical vulnerabilities in weeks. So the constraint is no longer detection — it’s verify, disclose, patch, deploy. Anthropic is expanding Project Glasswing to ~150 organizations, and pivoting its weight toward the new chokepoint.
From 50 partners to ~150 — aimed at the leverage points
Not just more headcount. The new group reaches sectors the first cohort underrepresented, and leans toward vendors whose code sits under thousands of downstream systems.
each must meet Anthropic’s security requirements first
cybersecurity vulnerability scanning tools
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Cute-Patch It Works on My Machine Meme Embroidered Iron on sew on Patch Funny Emblem Programmer Humor
Size: 3 inches tall
As an affiliate, we earn on qualifying purchases.
Finding used to be the hard part
For the whole history of the field, detection was the scarce, skilled work — the chokepoint. A model that surfaces 10,000 critical flaws in weeks inverts that. Toggle before/after and watch the bottleneck move.
The defensive pipeline — where the constraint sits
Same five stages. The chokepoint slides downstream.
Cute-Patch It Works on My Machine Meme Embroidered Iron on sew on Patch Funny Emblem Programmer Humor
Size: 3 inches tall
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
CompTIA CySA+ Certification Kit: Exam CS0-003 2025-2026: A Complete Cybersecurity Analyst Study System for Mastering Threat Detection, Incident Response and Security Monitoring With 1000 practice
As an affiliate, we earn on qualifying purchases.
AI redeployed downstream — and pushed beyond the cohort
Glasswing is consciously shifting its weight from finding toward disclosing, fixing & deploying. The same model helps at the new bottleneck.
Defensive tasks Mythos-class models now take on
Beyond scanning — the work that actually closes the gap.
Writing patches
Partners use the model to fix what it finds — not just flag it.
Pre-release checks
Preventing vulnerabilities from appearing in the first place.
Penetration testing
Simulating attacks to see how a flaw might be exploited.
Rebuilding in memory-safe languages
Attacking whole vulnerability classes at the root.
Claude Security
Uses public frontier models like Claude Opus 4.8 to scan codebases & suggest patches.
The Glasswing tooling
The vuln-finding tools, to trusted security teams — so partners’ methods replicate widely.
code vulnerability detection software
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Why the urgency is named, not gestured at
The program’s tempo is the tempo of a race against diffusion. Anthropic puts a number on the deadline.
Within 6–12 months, many other labs will have Mythos-class models — and could release them without safeguards.
In that world, cyberattacks could occur much more often, and in much more unpredictable forms. The strategic theory of the whole program: build the defensive head start now, while the capability is still scarce and gated — so when it’s cheap and everywhere, defenders already stand on higher ground.
Capability is scarce & gated
Mythos-class power sits with vetted Glasswing partners under Anthropic’s requirements.
Capability goes ambient
Other labs ship Mythos-class models — possibly ungoverned. The window to prepare closes.
CompTIA CySA+ Certification Kit: Exam CS0-003 2025-2026: A Complete Cybersecurity Analyst Study System for Mastering Threat Detection, Incident Response and Security Monitoring With 1000 practice
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Read it with its difficulties in view
Several are real — some Anthropic states outright, some inherent to the situation. None cancels the core, but all deserve to be held.
Dual use — and the safeguards don’t exist yet
The same capability that finds-and-patches can find-and-exploit. Anthropic says general release needs safeguards that it, and to its knowledge all other developers, have yet to develop. The caution is the clearest evidence of the power.
Gated, even as the logic demands breadth
Advanced defensive capability is allocated by one company’s selection — yet the announcement’s own case is that hundreds of thousands will need access. “Must be gated for safety” sits in tension with “must be widespread to work.”
Not a neutral observer
A frontier lab is at once warning of the danger, helping constitute it, and selling the response (Claude Security, the tooling, the Cyber Verification Program). The warning isn’t wrong — but the commercial frame is worth holding alongside the public-interest one.
Toward a permanent advantage for defenders
Cybersecurity has long been asymmetric in the attacker’s favor — defenders close every hole, attackers need one. The north star is to flip that.
More essential infrastructure
Plus critical-OSS maintainers & safety testers, US & overseas.
Cyber Verification Program
Mythos-class capability for specific cyberdefense tasks — breadth without waiting on full-release safeguards.
Make all software secure
And help the industry adjust how AI changes the core assumptions of cybersecurity.
Reading it in proportion
- The core is hard to argue with: AI made finding cheap & abundant; the bottleneck genuinely moved to patching & deployment; redirecting effort there is sane.
- The caveats sit alongside, not against: one company’s program, one company’s gate, a timeline & products that company has reason to advance — and admittedly-missing release safeguards.
- Hold both halves: the danger is plausible and the 10,000 flaws are real; the response is reasonable and commercially convenient; the aspiration is worthy and unproven.
Why It Matters
The expansion points to a change in the defensive AI problem. If AI systems can find large numbers of severe flaws quickly, the limiting factor becomes whether organizations can confirm the findings, report them responsibly, produce fixes and deploy those fixes without creating new risk.
That shift has practical consequences for infrastructure providers, software vendors and open-source maintainers. A large backlog of serious findings can improve security only if it reaches people able to act on it in a usable form. Without that, faster discovery could add pressure to already strained security teams.
Background
The first Glasswing cohort was relatively small, with roughly 50 partners using Claude Mythos Preview. The reported discovery of more than 10,000 severe flaws in weeks is the development now driving the expansion.
The source material frames Anthropic’s timeline as a race against broader access to similar systems. Anthropic is said to believe that within six to 12 months, other labs may have Mythos-class models and could release them with fewer safeguards. That claim has not been independently verified from the provided material.
Anthropic has also released Claude Security for broader use, described as a product that uses public frontier models such as Claude Opus 4.8 to scan codebases and suggest patches. Separate Glasswing tooling is described as available on request to trusted security teams.
What Remains Unclear
Several details remain unclear from the provided material. Anthropic has not provided, in this source, a public breakdown of the 10,000-plus flaws by product, sector, severity validation, exploitability or patch status. It is also unclear how many findings have been fixed, how many were duplicates, and how many were disclosed to affected vendors or open-source maintainers.
The six-to-12-month forecast for wider availability of Mythos-class systems is attributed to Anthropic’s view and should be treated as an estimate, not a confirmed industry timeline.
What’s Next
The next test for Project Glasswing is whether the expanded partner group can turn large-scale findings into verified fixes. Watch for disclosures, patch releases, open-source coordination, and clearer reporting on how many vulnerabilities are confirmed, remediated and deployed in production systems.
Key Questions
What is Project Glasswing?
Project Glasswing is described as Anthropic’s partner program for using advanced AI systems to find and help fix security flaws in important software systems.
What changed in the expansion?
Anthropic is moving from about 50 initial partners to roughly 150 additional organizations, including groups in critical infrastructure and high-leverage vendor sectors.
What did the first partners find?
According to the source material, the first partner group found more than 10,000 high- or critical-severity flaws after receiving access to Claude Mythos Preview in early April.
Why is fixing now the harder problem?
Finding large numbers of serious flaws creates a backlog. Security teams still need to verify reports, disclose them responsibly, write patches, test releases and deploy fixes.
What remains unknown?
The provided source does not say how many findings have been validated, patched or deployed, nor does it provide a full public list of affected systems.
Source: Thorsten Meyer AI
