---
type: "post"
id: "expanding-the-cyber-verification-program-anthropic-analysis-024c1b"
slug: "expanding-the-cyber-verification-program-anthropic-analysis-024c1b"
title: "Expanding the Cyber Verification Program \\ Anthropic"
description: "**Thesis:** Tiered access turns cyber safeguards into a verification and authorization system for different classes of security work."
retrieval_nugget: "**Thesis:** Tiered access turns cyber safeguards into a verification and authorization system for different classes of security work."
published_at: "2026-10-10"
updated_at: "2026-10-10"
record_date: "2026-10-10"
date_kind: "published_at"
topics: ["anthropic"]
source_urls: ["https://www.anthropic.com/news/cyber-verification-program"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "post:expanding-the-cyber-verification-program-anthropic-analysis-024c1b"
status: "published"
visuals: []
editorial_provenance: {"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:425a2e696b979429a8988ce454ce221bd2db193dd008c28e80e9ad2e4baeb164","reviewed_at":"2026-10-10T05:05:51.555Z","source_evidence_count":1,"verified_claim_count":2,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":2,"implication_count":2,"watch_condition_count":1,"related_record_count":0}
analysis: {"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"Tiered access turns cyber safeguards into a verification and authorization system for different classes of security work.","observed_facts":[{"text":"Anthropic says CVP now has three tiers: Defense Access, Red Team Access, and Specialized Access, with distinct verification requirements and security controls.","source_urls":["https://www.anthropic.com/news/cyber-verification-program"]},{"text":"In Anthropic’s reported CyScenarioBench evaluation, 46 of 50 Defense Access trials were blocked; Red Team Access had no blocks and completed 34 of 50 tasks.","source_urls":["https://www.anthropic.com/news/cyber-verification-program"]}],"mechanism":"Anthropic assigns model capabilities and safeguard settings by tier, linking broader offensive testing capability to stronger applicant verification and security controls.","why_now":"Anthropic says it is integrating Project Glasswing and its existing Cyber Verification Program into one expanded offering to extend access to more security organizations.","implications":["Security teams seeking advanced cyber capabilities must qualify according to the work they perform and demonstrate relevant controls.","The benchmark illustrates intended tier separation but does not establish real-world safety or effectiveness."],"evidence_boundary":"The benchmark results and program impact figures are Anthropic-reported; the source describes five attempts on each of ten benchmark challenges and acknowledges partial partner reporting for vulnerability counts.","watch_conditions":["Watch whether applications are approved on the timelines Anthropic gives for each tier and whether it reports evidence that tier-specific safeguards work beyond its benchmark."],"related_records":[],"new_branch_reason":"No prior New Runtime analytical record was supplied, so this announcement starts a distinct record on tiered authorization of advanced cyber capabilities."}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/posts/expanding-the-cyber-verification-program-anthropic-analysis-024c1b/","markdown":"https://newruntime.com/posts/expanding-the-cyber-verification-program-anthropic-analysis-024c1b.md","json":"https://newruntime.com/posts/expanding-the-cyber-verification-program-anthropic-analysis-024c1b.json"}
---

# Expanding the Cyber Verification Program \ Anthropic

## Retrieval answer

**Thesis:** Tiered access turns cyber safeguards into a verification and authorization system for different classes of security work.

**Thesis:** Tiered access turns cyber safeguards into a verification and authorization system for different classes of security work.

**Mechanism:** Anthropic assigns model capabilities and safeguard settings by tier, linking broader offensive testing capability to stronger applicant verification and security controls. Defense Access covers defensive work; Red Team Access adds authorized penetration testing; Specialized Access is reserved for a limited set of organizations testing sensitive systems. The program requires applicant verification and proof of relevant controls, and Anthropic says enrolled organizations must retain data for misuse monitoring, subject to stated zero-data-retention exceptions.

**Why now:** Anthropic says it is integrating Project Glasswing and its existing Cyber Verification Program into one expanded offering to extend access to more security organizations. Its evaluation offers a concrete illustration of the intended separation: without CVP, all 50 CyScenarioBench trials were blocked; Defense Access blocked 46 of 50; Red Team Access had no blocks and completed 34 of 50.

**Evidence boundary:** The benchmark results and program impact figures are Anthropic-reported; the source describes five attempts on each of ten benchmark challenges and acknowledges partial partner reporting for vulnerability counts. These are not an independent audit or evidence of real-world outcomes.

**First implication:** Security teams seeking advanced cyber capabilities must qualify according to the work they perform and demonstrate relevant controls.

**First watch condition:** Watch whether applications are approved on the timelines Anthropic gives for each tier and whether it reports evidence that tier-specific safeguards work beyond its benchmark.

The announcement records an access-policy change rather than a new model launch. It also states that CVP is available through the Claude Platform, Google Cloud Vertex AI, and Microsoft Foundry, while Amazon Bedrock access is limited to customers eligible for Enterprise Frontier Safeguards. The practical boundary is therefore both organizational and platform-specific. A further test will be whether teams can complete legitimate work without excessive blocking while keeping higher-risk capabilities restricted to authorized activity.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Anthropic](https://newruntime.com/topics/anthropic.md): Explore the anthropic topic hub.
- collection: [Field Notes](https://newruntime.com/posts.json): Open the latest editorial analysis.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)