GenAI PM
tool9 mentions· Updated Jul 19, 2026

Claude Mythos Preview

A Claude model preview that Anthropic withheld due to high blast radius. It is cited as an example of a model being held back for deployment-risk reasons.

Key Highlights

  • Claude Mythos Preview was used in restricted security workflows and reportedly uncovered large numbers of high-severity software vulnerabilities.
  • Anthropic cited the model as too risky for broad deployment, making it a notable example of a capability being held back for blast-radius concerns.
  • Project Glasswing positioned the model as a force multiplier for defenders, with partners reporting major increases in bug-finding rates.
  • For AI PMs, the tool is a practical case study in gated rollout, environment-level controls, and human-in-the-loop design for risky agents.

Claude Mythos Preview

Overview

Claude Mythos Preview is an Anthropic preview model associated with high-end autonomous software security work, especially finding and exploiting critical vulnerabilities in real-world systems. It was discussed as a restricted-access model used with industry partners, including through Project Glasswing, to identify large volumes of severe software flaws before broader exposure. Anthropic also cited it as a model withheld from general deployment in April 2026 because its potential blast radius was considered too high.

For AI Product Managers, Claude Mythos Preview matters because it is a concrete case study in capability-risk tradeoffs. It shows that frontier model value can be extremely high in narrow enterprise workflows—such as vulnerability research—while also being too dangerous for normal product release. The model is therefore useful not just as a security tool example, but as a benchmark for thinking about gated rollout, environment-level controls, partner-only deployments, human approval flows, and why some capable models should be constrained or delayed rather than broadly shipped.

Key Developments

  • 2026-04-08: Anthropic published a technical report describing software vulnerabilities and exploits uncovered with Claude Mythos Preview, including flaw types, attack vectors, and mitigation strategies.
  • 2026-04-18: DeepLearning.AI highlighted Claude Mythos Preview as a model that can autonomously find and exploit critical software vulnerabilities; access was limited to industry partners so issues could be found and patched before any public release.
  • 2026-04-23: Bobby Holley, CTO of Firefox, said Claude Mythos Preview helped identify many vulnerabilities in Firefox, framing the model as a meaningful advantage for defenders doing security work.
  • 2026-05-23: Anthropic’s initial Project Glasswing update said Claude Mythos Preview, working with about 50 partners, helped surface more than 10,000 high- or critical-severity vulnerabilities in systemically important software; Cloudflare alone reportedly saw 2,000 bugs, including 400 high/critical, and partners reported bug-finding rates increasing by more than 10x.
  • 2026-05-29: Anthropic said Claude Opus 4.8 showed misalignment rates similar to Claude Mythos Preview, using Mythos Preview as a comparison point in frontier model safety and behavior discussions.
  • 2026-06-03: Anthropic expanded Project Glasswing and rolled out Claude Mythos Preview to roughly 150 additional organizations across 15+ countries.
  • 2026-06-19: Anthropic Engineering cited Claude Mythos Preview as a model judged too risky to ship in April 2026, while explaining containment approaches across Claude products such as sandboxes, VMs, filesystem and egress limits, and model-layer safeguards.
  • 2026-06-25: Anthropic reiterated that Claude Mythos Preview had been considered too high-risk to ship, presenting it as evidence for layered defenses across environment, model, and external-content boundaries.
  • 2026-07-19: Anthropic again referenced withholding Claude Mythos Preview because of excessive blast radius, alongside data showing model-layer defenses can reduce but not eliminate prompt-injection success, reinforcing the case for overlapping containment mechanisms.

Relevance to AI PMs

1. A model for gated deployment strategy: Claude Mythos Preview shows that not every high-performing model should be generally available. PMs can use this as a template for partner-only betas, use-case restrictions, approvals, and staged rollout plans when capability outpaces safety confidence.

2. A lesson in product containment design: The surrounding Anthropic commentary makes clear that model safety is not enough on its own. PMs building agentic systems should scope permissions, sandbox execution, limit tool access, add egress controls, and design human-in-the-loop checkpoints before expanding autonomy.

3. A signal for enterprise security product opportunities: The Project Glasswing results suggest strong demand for AI-assisted vulnerability discovery, but also reveal operational bottlenecks in triage, disclosure, and patching. PMs should plan workflows for review queues, severity scoring, deduplication, and customer remediation—not just model output quality.

Related

  • Anthropic: Creator of Claude Mythos Preview and the organization that both deployed it selectively and withheld it from broad release due to deployment risk.
  • Project Glasswing: The main program through which Claude Mythos Preview was used with partners to discover software vulnerabilities at scale.
  • Claude / claude.ai / Claude Code / Claude Cowork: Related Claude products discussed in Anthropic’s containment framework; these products provide context for how Anthropic distinguishes deployable systems from higher-risk previews.
  • Claude Opus 4.7 and Claude Opus 4.8: Later Claude models used as comparison points for prompt-injection resistance, code-review quality, and misalignment behavior relative to Mythos Preview.
  • Cloudflare: A Project Glasswing partner that reportedly found thousands of bugs with the help of Claude Mythos Preview, illustrating enterprise-scale security impact.
  • Firefox / Bobby Holley: Firefox’s CTO publicly described the model as helpful in identifying vulnerabilities, adding third-party validation of its security usefulness.
  • Dario Amodei and Boris Cherny: Anthropic-linked figures associated with the broader narrative around frontier model capability, safety, and deployment decisions.
  • Simon Willison, Greg Isenberg, and DeepLearning.AI: Amplified discussion of Claude Mythos Preview, helping frame it as an important example of restricted deployment and security-focused AI use.

Newsletter Mentions (9)

2026-07-19
Anthropic withheld Claude Mythos Preview in April 2026 for having too high a blast radius and reports that model-layer defenses are strong but imperfect—Claude Opus 4.7 holds prompt-injection attack success to about 0.1% on single attempts and roughly 5–6% after 100 adaptive attempts—so overlapping defenses across environment, model, and external content are required.

#2 📝 Anthropic Engineering How we contain Claude across products - Anthropic deploys three agentic products—claude.ai, Claude Code, and Claude Cowork—using two containment strategies: human-in-the-loop approvals (users approved roughly 93% of permission prompts) and environmental containment (sandboxes, VMs, filesystem and egress controls); Claude Code’s auto mode automates safer approvals and catches roughly 83% of overeager behaviors before they execute. Anthropic withheld Claude Mythos Preview in April 2026 for having too high a blast radius and reports that model-layer defenses are strong but imperfect—Claude Opus 4.7 holds prompt-injection attack success to about 0.1% on single attempts and roughly 5–6% after 100 adaptive attempts—so overlapping defenses across environment, model, and external content are required.

2026-06-25
Layered defenses—environmental sandboxes/VMs/egress controls, model-layer system prompts/classifiers/training, and limiting external content—are used across claude.ai, Claude Code, and Cowork; telemetry shows users approved roughly 93% of permission prompts, Claude Code auto mode blocks about 83% of overeager behaviors before execution, Claude Opus 4.7 holds prompt-injection success to ~0.1% on single attempts (~5–6% after 100 adaptive attempts), and Claude Mythos Preview was judged too high-risk to ship in April 2026.

The preview model appears in the context of Anthropic's product safety decisions. It was not shipped because of perceived risk.

2026-06-19
Anthropic has deployed Claude across claude.ai, Claude Code, and Claude Cowork while containing blast radius via environment controls (sandboxes, VMs, filesystem/egress limits), model-layer controls (system prompts, classifiers, probes, training), and restricting external-content/tool access, noting Claude Mythos Preview was judged too risky to ship in April 2026.

📝 Anthropic Engineering How we contain Claude across products - Anthropic has deployed Claude across claude.ai, Claude Code, and Claude Cowork while containing blast radius via environment controls (sandboxes, VMs, filesystem/egress limits), model-layer controls (system prompts, classifiers, probes, training), and restricting external-content/tool access, noting Claude Mythos Preview was judged too risky to ship in April 2026. Telemetry showed users approved ~93% of permission prompts, Claude Code auto mode blocks roughly 83% of overeager behaviors before execution, and Claude Opus 4.7 resists prompt-injection with about 0.1% success on single attempts and ~5–6% after 100 adaptive attempts.

2026-06-03
𝕏 Anthropic expands Project Glasswing, rolling out Claude Mythos Preview to roughly 150 more organizations across 15+ countries.

#3 𝕏 Anthropic expands Project Glasswing, rolling out Claude Mythos Preview to roughly 150 more organizations across 15+ countries.

2026-05-29
Also, Opus 4.8 is about four times less likely than Opus 4.7 to let code flaws pass unremarked, scored 84% on Online-Mind2Web, was the only model to complete every Super-Agent case end-to-end (beating prior Opus models and GPT-5.5), is the first to break 10% on the Legal Agent all-pass standard, and shows misalignment rates similar to Claude Mythos Preview while Genie users report 61% cheaper token cost versus Opus 4.7 for multimodal reasoning.

Anthropic releases Claude Opus 4.8 with dynamic workflows #1 📝 Anthropic News Introducing Claude Opus 4.8 - Anthropic released Claude Opus 4.8 today at the same price as Opus 4.7, adding user-selectable effort levels, Claude Code “dynamic workflows,” and a fast mode that runs 2.5× faster and is three times cheaper than on prior models. The company reports broad capability and alignment gains—Opus 4.8 is about four times less likely than Opus 4.7 to let code flaws pass unremarked, scored 84% on Online-Mind2Web, was the only model to complete every Super-Agent case end-to-end (beating prior Opus models and GPT-5.5), is the first to break 10% on the Legal Agent all-pass standard, and shows misalignment rates similar to Claude Mythos Preview while Genie users report 61% cheaper token cost versus Opus 4.7 for multimodal reasoning. Also covered by: @v0 , @There's An AI For That , @There's An AI For That , @Aravind Srinivas , @claire vo 🖤, building @chatprd , @Mike Krieger , @Claude, @Cognition, @Claire Vo , @Dan Shipper , @How I AI Podcast

2026-05-23
Project Glasswing: An initial update - Project Glasswing, launched last month, used Claude Mythos Preview with about 50 partners to surface more than 10,000 high- or critical‑severity vulnerabilities in systemically important software (Cloudflare reported 2,000 bugs, 400 high/critical) and partners say bug‑finding rates increased by over tenfold.

Anthropic launches Project Glasswing security scanner #1 📝 Anthropic News Project Glasswing: An initial update - Project Glasswing, launched last month, used Claude Mythos Preview with about 50 partners to surface more than 10,000 high- or critical‑severity vulnerabilities in systemically important software (Cloudflare reported 2,000 bugs, 400 high/critical) and partners say bug‑finding rates increased by over tenfold. Anthropic also scanned over 1,000 open‑source projects and estimated 6,202 high/critical issues out of 23,019 total, triaged 1,752 of those (90.6% true positives, 62.4% confirmed high/critical), found concrete exploits including wolfSSL's CVE-2026-5194, and says the new bottleneck is human triage, disclosure, and patching. Also covered by: @Mario Zechner #2 𝕏 Anthropic reports that Claude Mythos Preview uncovers a surge of security vulnerabilities, meaning patching them boosts safety but forces the software industry to scale its processes—as detailed in their initial Project Glasswing update.

2026-04-23
#10 📝 Simon Willison Bobby Holley - A quoted excerpt from Bobby Holley (CTO, Firefox) describing how Anthropic's Claude Mythos Preview helped identify many vulnerabilities in Firefox and expressing optimism that defenders can now decisively win by focusing on security work.

#10 📝 Simon Willison Bobby Holley - A quoted excerpt from Bobby Holley (CTO, Firefox) describing how Anthropic's Claude Mythos Preview helped identify many vulnerabilities in Firefox and expressing optimism that defenders can now decisively win by focusing on security work.

2026-04-18
DeepLearning.AI highlights Anthropic’s Claude Mythos Preview, an AI model that autonomously finds and exploits critical software vulnerabilities; it’s currently limited to industry partners to uncover and patch flaws before any public release.

#3 𝕏 DeepLearning.AI highlights Anthropic’s Claude Mythos Preview, an AI model that autonomously finds and exploits critical software vulnerabilities; it’s currently limited to industry partners to uncover and patch flaws before any public release. #4 𝕏 OpenAI research lead Joy Jiao and product lead Yunyun Wang joined Andrew Mayne on the OpenAI Podcast to unveil the new Life Sciences model series for biology, drug discovery, and translational medicine.

2026-04-08
Anthropic published a detailed technical report on software vulnerabilities and exploits uncovered in Claude Mythos Preview, outlining the specific flaws, attack vectors, and mitigation strategies.

#1 𝕏 Anthropic published a detailed technical report on software vulnerabilities and exploits uncovered in Claude Mythos Preview, outlining the specific flaws, attack vectors, and mitigation strategies. Also covered by: @Anthropic , @Boris Cherny , @Greg Isenberg , @Simon Willison

Related

Anthropiccompany

An AI company building Claude and related agent tooling. It is mentioned here in connection with managed agents engineering guidance and Claude Code behavior.

Claudetool

Anthropic’s general-purpose AI assistant, mentioned as part of the tool stack used in the Total Recall memory-layer example. It is also central to multiple newsletter items about safety and modes.

Simon Willisonperson

A prominent AI blogger and commentator referenced in connection with an article on token reselling and fraud. He is cited as the source of the newsletter item discussing the marketplace and API-key abuse.

DeepLearning.AIcompany

DeepLearning.AI appears multiple times as an educational publisher covering embeddings and a case about China/Meta/Manus. It is a recurring AI education and media brand.

Greg Isenbergperson

An AI and startup operator who shared marketing automation workflows. The example centers on AI agents for outbound acquisition and content generation.

Boris Chernyperson

A notable AI practitioner/commentator referenced for discussing model harnesses and Claude behavior. He emphasizes model-specific tool design, prompting, and tuning for effective agent systems.

Claude Opus 4.7tool

A Claude model version referenced for its prompt-injection resistance metrics. It serves as a benchmark example of model-layer defenses being strong but not sufficient on their own.

Cloudflarecompany

A networking and edge infrastructure company. In this newsletter, it provides AI Gateway infrastructure for xAI's Grok models.

Stay updated on Claude Mythos Preview

Get curated AI PM insights delivered daily — covering this and 1,000+ other sources.

Subscribe Free