Claude Mythos Preview
A Claude model preview that Anthropic withheld due to high blast radius. It is cited as an example of a model being held back for deployment-risk reasons.
Key Highlights
- Claude Mythos Preview is a powerful Anthropic model preview for autonomous vulnerability discovery that was reportedly withheld from broad release due to high blast radius.
- Its role in Project Glasswing showed that frontier models can surface security issues at a scale that shifts the bottleneck to human triage, disclosure, and patching.
- Anthropic used Mythos Preview as a real-world example for why layered defenses across environment, model, and external content are necessary.
- For AI PMs, the model is a practical case study in gating launches based on deployment risk rather than capability alone.
Claude Mythos Preview
Overview
Claude Mythos Preview is an Anthropic model preview focused on autonomous software vulnerability discovery and exploitation. In newsletter coverage, it is described as powerful enough to uncover large volumes of high- and critical-severity security issues, and notable because Anthropic reportedly chose not to broadly ship it in April 2026 due to its potentially high "blast radius." That makes it an important example of a frontier model being constrained for deployment-risk reasons rather than purely capability reasons.For AI Product Managers, Claude Mythos Preview matters as a concrete case study in productizing high-capability models safely. It shows that model quality alone is not the shipping decision: access controls, environmental containment, approval flows, external tool limits, and downstream operational capacity all shape whether a model can be launched. It also highlights a recurring product lesson in agentic AI: the more powerful the model becomes in real-world environments, the more the bottleneck shifts from raw capability to governance, triage, disclosure, and safe rollout design.
Key Developments
- 2026-04-08: Anthropic published a technical report on software vulnerabilities and exploits uncovered in Claude Mythos Preview, detailing flaws, attack vectors, and mitigations.
- 2026-04-18: DeepLearning.AI highlighted Claude Mythos Preview as a model that can autonomously find and exploit critical software vulnerabilities, noting that access was limited to industry partners ahead of any public release.
- 2026-04-23: Simon Willison cited comments from Firefox CTO Bobby Holley describing how Claude Mythos Preview helped identify many vulnerabilities in Firefox and arguing that defenders may now gain an advantage if they invest in security work.
- 2026-05-23: Anthropic shared an initial Project Glasswing update saying Mythos Preview, used with about 50 partners, surfaced more than 10,000 high- or critical-severity vulnerabilities in systemically important software; Cloudflare alone reportedly found around 2,000 bugs, including 400 high/critical issues.
- 2026-05-29: In Anthropic's Claude Opus 4.8 launch materials, the company said Opus 4.8 showed misalignment rates similar to Claude Mythos Preview, using Mythos Preview as a benchmark point for alignment discussion.
- 2026-06-03: Anthropic reportedly expanded Project Glasswing, rolling out Claude Mythos Preview to roughly 150 additional organizations across 15+ countries.
- 2026-06-19: Anthropic engineering materials on containing Claude across products referenced Mythos Preview as a model judged too risky to ship in April 2026, alongside descriptions of environment, model-layer, and content-access controls.
- 2026-06-25: Further reporting reiterated that layered defenses were used across Claude products and that Mythos Preview had been deemed too high-risk to release broadly.
- 2026-07-19: Anthropic again cited withholding Claude Mythos Preview because of excessive blast radius, while sharing metrics showing model-layer defenses are strong but imperfect, reinforcing the need for overlapping safety controls.
Relevance to AI PMs
- Shipping criteria must include deployment risk, not just benchmark gains. Mythos Preview is a strong reminder to define launch gates around blast radius, tool access, escalation paths, and abuse potential—not only model capability or user demand.
- Agentic products need layered containment by design. The surrounding Anthropic discussion connects Mythos Preview to sandboxes, VMs, filesystem and egress controls, human approvals, and restricted external content. PMs building tool-using agents should scope these controls as core product requirements, not later add-ons.
- Operational readiness can become the real bottleneck. Project Glasswing suggests the model could generate vulnerabilities faster than organizations could triage, disclose, and patch them. PMs should plan for review queues, human workflows, partner coordination, and response SLAs before expanding access to powerful systems.
Related
- Anthropic: Creator of Claude Mythos Preview and the source of the safety, containment, and Project Glasswing framing around the model.
- Project Glasswing: The security-focused program through which Mythos Preview was deployed with partners to find vulnerabilities in important software systems.
- Cloudflare: A prominent Project Glasswing partner cited as finding thousands of bugs with the system.
- Firefox / Bobby Holley: Firefox's CTO publicly discussed Mythos Preview's usefulness in identifying vulnerabilities, offering a real-world validation signal.
- Claude Opus 4.7 and Claude Opus 4.8: Later Claude models referenced in adjacent discussions about prompt-injection resistance, code-safety performance, and alignment comparisons.
- Dario Amodei and Boris Cherny: Related Anthropic leadership/voices often associated with the company's product and engineering narratives.
- Simon Willison, Greg Isenberg, and DeepLearning.AI: External commentators and outlets that amplified awareness of Mythos Preview.
- Claude / claude.ai: The broader Claude product family provides the context for Anthropic's containment strategies and deployment decisions.
Newsletter Mentions (9)
“Anthropic withheld Claude Mythos Preview in April 2026 for having too high a blast radius and reports that model-layer defenses are strong but imperfect—Claude Opus 4.7 holds prompt-injection attack success to about 0.1% on single attempts and roughly 5–6% after 100 adaptive attempts—so overlapping defenses across environment, model, and external content are required.”
#2 📝 Anthropic Engineering How we contain Claude across products - Anthropic deploys three agentic products—claude.ai, Claude Code, and Claude Cowork—using two containment strategies: human-in-the-loop approvals (users approved roughly 93% of permission prompts) and environmental containment (sandboxes, VMs, filesystem and egress controls); Claude Code’s auto mode automates safer approvals and catches roughly 83% of overeager behaviors before they execute. Anthropic withheld Claude Mythos Preview in April 2026 for having too high a blast radius and reports that model-layer defenses are strong but imperfect—Claude Opus 4.7 holds prompt-injection attack success to about 0.1% on single attempts and roughly 5–6% after 100 adaptive attempts—so overlapping defenses across environment, model, and external content are required.
“Layered defenses—environmental sandboxes/VMs/egress controls, model-layer system prompts/classifiers/training, and limiting external content—are used across claude.ai, Claude Code, and Cowork; telemetry shows users approved roughly 93% of permission prompts, Claude Code auto mode blocks about 83% of overeager behaviors before execution, Claude Opus 4.7 holds prompt-injection success to ~0.1% on single attempts (~5–6% after 100 adaptive attempts), and Claude Mythos Preview was judged too high-risk to ship in April 2026.”
The preview model appears in the context of Anthropic's product safety decisions. It was not shipped because of perceived risk.
“Anthropic has deployed Claude across claude.ai, Claude Code, and Claude Cowork while containing blast radius via environment controls (sandboxes, VMs, filesystem/egress limits), model-layer controls (system prompts, classifiers, probes, training), and restricting external-content/tool access, noting Claude Mythos Preview was judged too risky to ship in April 2026.”
📝 Anthropic Engineering How we contain Claude across products - Anthropic has deployed Claude across claude.ai, Claude Code, and Claude Cowork while containing blast radius via environment controls (sandboxes, VMs, filesystem/egress limits), model-layer controls (system prompts, classifiers, probes, training), and restricting external-content/tool access, noting Claude Mythos Preview was judged too risky to ship in April 2026. Telemetry showed users approved ~93% of permission prompts, Claude Code auto mode blocks roughly 83% of overeager behaviors before execution, and Claude Opus 4.7 resists prompt-injection with about 0.1% success on single attempts and ~5–6% after 100 adaptive attempts.
“𝕏 Anthropic expands Project Glasswing, rolling out Claude Mythos Preview to roughly 150 more organizations across 15+ countries.”
#3 𝕏 Anthropic expands Project Glasswing, rolling out Claude Mythos Preview to roughly 150 more organizations across 15+ countries.
“Also, Opus 4.8 is about four times less likely than Opus 4.7 to let code flaws pass unremarked, scored 84% on Online-Mind2Web, was the only model to complete every Super-Agent case end-to-end (beating prior Opus models and GPT-5.5), is the first to break 10% on the Legal Agent all-pass standard, and shows misalignment rates similar to Claude Mythos Preview while Genie users report 61% cheaper token cost versus Opus 4.7 for multimodal reasoning.”
Anthropic releases Claude Opus 4.8 with dynamic workflows #1 📝 Anthropic News Introducing Claude Opus 4.8 - Anthropic released Claude Opus 4.8 today at the same price as Opus 4.7, adding user-selectable effort levels, Claude Code “dynamic workflows,” and a fast mode that runs 2.5× faster and is three times cheaper than on prior models. The company reports broad capability and alignment gains—Opus 4.8 is about four times less likely than Opus 4.7 to let code flaws pass unremarked, scored 84% on Online-Mind2Web, was the only model to complete every Super-Agent case end-to-end (beating prior Opus models and GPT-5.5), is the first to break 10% on the Legal Agent all-pass standard, and shows misalignment rates similar to Claude Mythos Preview while Genie users report 61% cheaper token cost versus Opus 4.7 for multimodal reasoning. Also covered by: @v0 , @There's An AI For That , @There's An AI For That , @Aravind Srinivas , @claire vo 🖤, building @chatprd , @Mike Krieger , @Claude, @Cognition, @Claire Vo , @Dan Shipper , @How I AI Podcast
“Project Glasswing: An initial update - Project Glasswing, launched last month, used Claude Mythos Preview with about 50 partners to surface more than 10,000 high- or critical‑severity vulnerabilities in systemically important software (Cloudflare reported 2,000 bugs, 400 high/critical) and partners say bug‑finding rates increased by over tenfold.”
Anthropic launches Project Glasswing security scanner #1 📝 Anthropic News Project Glasswing: An initial update - Project Glasswing, launched last month, used Claude Mythos Preview with about 50 partners to surface more than 10,000 high- or critical‑severity vulnerabilities in systemically important software (Cloudflare reported 2,000 bugs, 400 high/critical) and partners say bug‑finding rates increased by over tenfold. Anthropic also scanned over 1,000 open‑source projects and estimated 6,202 high/critical issues out of 23,019 total, triaged 1,752 of those (90.6% true positives, 62.4% confirmed high/critical), found concrete exploits including wolfSSL's CVE-2026-5194, and says the new bottleneck is human triage, disclosure, and patching. Also covered by: @Mario Zechner #2 𝕏 Anthropic reports that Claude Mythos Preview uncovers a surge of security vulnerabilities, meaning patching them boosts safety but forces the software industry to scale its processes—as detailed in their initial Project Glasswing update.
“#10 📝 Simon Willison Bobby Holley - A quoted excerpt from Bobby Holley (CTO, Firefox) describing how Anthropic's Claude Mythos Preview helped identify many vulnerabilities in Firefox and expressing optimism that defenders can now decisively win by focusing on security work.”
#10 📝 Simon Willison Bobby Holley - A quoted excerpt from Bobby Holley (CTO, Firefox) describing how Anthropic's Claude Mythos Preview helped identify many vulnerabilities in Firefox and expressing optimism that defenders can now decisively win by focusing on security work.
“DeepLearning.AI highlights Anthropic’s Claude Mythos Preview, an AI model that autonomously finds and exploits critical software vulnerabilities; it’s currently limited to industry partners to uncover and patch flaws before any public release.”
#3 𝕏 DeepLearning.AI highlights Anthropic’s Claude Mythos Preview, an AI model that autonomously finds and exploits critical software vulnerabilities; it’s currently limited to industry partners to uncover and patch flaws before any public release. #4 𝕏 OpenAI research lead Joy Jiao and product lead Yunyun Wang joined Andrew Mayne on the OpenAI Podcast to unveil the new Life Sciences model series for biology, drug discovery, and translational medicine.
“Anthropic published a detailed technical report on software vulnerabilities and exploits uncovered in Claude Mythos Preview, outlining the specific flaws, attack vectors, and mitigation strategies.”
#1 𝕏 Anthropic published a detailed technical report on software vulnerabilities and exploits uncovered in Claude Mythos Preview, outlining the specific flaws, attack vectors, and mitigation strategies. Also covered by: @Anthropic , @Boris Cherny , @Greg Isenberg , @Simon Willison
Related
A frontier AI company focused on Claude and enterprise-safe AI systems. It is important for PMs because of its model capabilities, enterprise policies, and research achievements.
Anthropic’s assistant and model family. For AI PMs, Claude is notable for reasoning, coding, and enterprise use cases, including highly complex theorem-proving work.
A prominent AI blogger and commentator referenced in connection with an article on token reselling and fraud. He is cited as the source of the newsletter item discussing the marketplace and API-key abuse.
An AI education company that publishes commentary and training on applied AI. It is relevant to PMs for practical guidance, enterprise policies, and model ecosystem updates.
An entrepreneur and creator featured in a segment about making money with a Grok bot workflow. He is associated here with commentary on AI-driven newsletter operations.
An Anthropic leader associated with Claude Code. Here he requests feedback on making Claude Code more extensible.
A Claude model version referenced for its prompt-injection resistance metrics. It serves as a benchmark example of model-layer defenses being strong but not sufficient on their own.
Cloudflare provides web infrastructure, bot protection, and edge services that are increasingly used for AI agent monetization and control.
Stay updated on Claude Mythos Preview
Get curated AI PM insights delivered daily — covering this and 1,000+ other sources.
Subscribe Free