就在警告竞争对手Z.ai的GLM-5.3模型及其先进网络安全能力的危险仅一周后，Anthropic扩展了其网络验证计划（CVP）——或者更确切地说，是对其进行了重组。这家AI公司表示：“过去六个月里，我们通过两个计划提供可信访问权限：Project Glasswing和CVP。现在，我们将这些计划整合为一个扩展的产品，旨在让更多安全组织获得保护其系统所需的能力。”
Only a week after warning about the perils of competitor Z.ai's GLM-5.3 model and its advanced cybersecurity capabilities, Anthropic has expanded its Cyber Verification Program (CVP) – or rather, reconfigured it. "For the past six months, we’ve enabled trusted access through two programs: Project Glasswing and the CVP," the AI biz said. "Now, we’re integrating these programs into one expanded offering, designed to give more security organizations access to the capabilities they need to protect their systems."
Project Glasswing和CVP于2026年4月随公司备受瞩目的前沿模型Mythos首发而推出。Project Glasswing让合作伙伴提前接触Mythos，以便他们在攻击者之前扫描自家系统中的漏洞。VulnCheck研究员Patrick Garrity对Project Glasswing识别出的CVE并不买账，他指出，在追踪的225个与Anthropic相关的漏洞中，实际被利用的不足0.5%。而Anthropic上个月关于GLM-5.3风险的警告，某种程度上削弱了其自家Mythos模型有何特别之处的说法。
Project Glasswing and CVP launched in April 2026 alongside the debut of Mythos, the company's highly capable and equally hyped frontier model. Project Glasswing gave partners early access to Mythos so they could scour their systems for vulnerabilities before attackers beat them to it. VulnCheck researcher Patrick Garrity was not particularly impressed with CVEs identified by Project Glasswing, noting that fewer than 0.5 percent of the 225 Anthropic-linked vulnerabilities he tracked were being exploited in the wild. And Anthropic's own warning last month about the risks posed by GLM-5.3 somewhat undermines the idea that there's anything special about its own Mythos model.
即便如此，Anthropic称其安全计划已让合作伙伴在2026年4月至7月间发现至少129,000个经验证的软件漏洞。该公司还声称，其自身的开源扫描工作在4月至10月间额外揭示了5,500个经验证的漏洞。Anthropic表示：“在这些经验证的漏洞中，已有超过33,000个被评为严重或高危级别。这很可能是少报了，因为数据仅基于部分Glasswing合作伙伴的调查反馈。因此，我们预计真实影响至少是这个数字的五倍。”这些漏洞何时会被修补尚不清楚。
Even so, Anthropic says that its security program has allowed its partners to spot at least 129,000 verified software vulnerabilities between April and July 2026. And the biz claims that its own open source scanning efforts revealed an additional 5,500 verified vulnerabilities between April and October. "Of these verified vulnerabilities, more than 33,000 have so far been rated as critical- or high-severity," Anthropic said. "This is likely an undercount, as it is based on survey data from only a subset of Glasswing partners. As such, we expect the true impact to be at least five times higher." When these might get patched is unclear.
公司自身的数据显示，在5,674个真阳性漏洞中，有3,014个属于高危严重级，1,522个属于关键严重级，但仅有516个已被修补。考虑到业界大肆宣扬AI模型在网络安全方面的卓越能力，生成修复方案、测试并部署本应已近乎自动化。但识别与修复之间的差距表明，系统中存在大量松动环节亟待理顺。两个计划合并为一个，分三个层级如今，Anthropic原本面向组织和个人安全专业人士的两个计划已合并并重组为三个层级。
The company's own figures indicate that of 5,674 true positive vulnerabilities, 3,014 are high severity, and 1,522 are critical severity, yet only 516 have been patched. Given industry boasting about the cybersecurity prowess of AI models, generating a fix, testing it, and deploying it ought to be nearly automatic at this point. But the gap between identification and remediation suggests there's a lot of slack in the system that needs to be ironed out. Two programs into one with three tiers Now Anthropic's two programs, one intended for organizations and one for individual security professionals, have been merged and reconfigured into three tiers.
这家AI公司未解释原因，但其声称的意图是将模型能力与特定任务挂钩：防御访问、红队访问和专项访问。根据层级不同，参与者在安全相关任务上将遇到更多或更少的限制。作为衡量计划参与价值的指标，Anthropic表示，基于在10个CyScenarioBench挑战中各尝试五次的情况，未获得CVP访问权限者在每次尝试中均被拦截。
The AI biz has not explained why, but its stated intent is to tie model capabilities to specific tasks: Defense Access, Red Team Access, and Specialized Access. Depending on the tier, participants will encounter more or fewer blocks on security-related tasks. As a measure of program participation value, Anthropic said that based on five attempts at 10 CyScenarioBench challenges, those without CVP access got blocked on every attempt.
防御访问面向企业、非营利组织、高校及政府机构的安全团队，其核心关注系统防御。在该层级，Claude Opus 5.5在50次尝试中遭遇46次拒绝，仅成功4次。红队访问面向渗透测试和攻击性网络评估，参与者仍会因可能导致物理伤害或大规模中断的模型交互而遭遇拒绝。具体而言，在启用红队访问防护措施的情况下，Claude Opus 5.5完成了50项任务中的34项，成功率与专项访问预期相当。
Defense Access is intended for security teams at companies, nonprofits, universities, and government organizations that focus on system defense. In this tier, Claude Opus 5.5 faced refusals in 46 of 50 attempts and succeeded four times. Red Team Access is for penetration testing and offensive cyber evaluation, and participants will still face model refusals for model interactions that would cause physical harm or mass disruption. Specifically, Claude Opus 5.5 completed 34 of the 50 tasks with Red Team Access safeguards enabled, a rate similar to what would be expected from Specialized Access.
专用访问听起来像是 Glasswing 的重新品牌——它“专为有限的一组经过验证的组织保留，这些组织被授权测试可能影响人们生活或扰乱市场的安全系统，例如飞行操作系统、电网、电信网络、银行间转账基础设施和政府行政网络。”获准进入这一专属层级的组织将面临最少的模型拒绝，不计算那些使用已移除护栏的开放权重模型的人。
Specialized Access sounds like a rebranding of Glasswing – it's "reserved for a limited set of verified organizations that are authorized to test safety systems that could impact people’s lives or disrupt markets, such as flight operating systems, power grids, telecom networks, interbank transfer infrastructure, and government administrative networks." Those granted admission to this exclusive tier will face the fewest model refusals, not counting anyone using abliterated open-weight models that have had their guardrails suppressed.
在未来一两个月内，计划参与者将需要允许 Anthropic 保留其数据，作为其 AI 安全要求的一部分。但很快，该公司的企业前沿防护计划将提供零数据保留。已在使用 Claude Fable 5.1 或 Claude Mythos 5.1 时获得零数据保留授权的组织，可以在相同条款下参与 CVP。®
For the next month or two, program participants will need to allow their data to be retained by Anthropic as part of its AI safety requirements. But soonish, the company's Enterprise Frontier Safeguards program will offer zero data retention. Organizations already granted zero data retention while using Claude Fable 5.1 or Claude Mythos 5.1 can participate in CVP under those same terms.®