Anthropic expands cybersecurity verification tiers

Authorization remains part of access

The program announcement brings together earlier verification and Project Glasswing efforts. Defense Access covers incident response, malware analysis and vulnerability validation. Red Team Access adds authorized penetration testing and red-teaming. Specialized Access permits narrowly reviewed, authorized high-risk work for safety testers, with additional verification and security requirements.

Three access tiers, distinct limits

Defense Access

Authorized scopeIncident response, malware and vulnerability checks

BoundaryDefined defensive scope

Red Team Access

Authorized scopeAuthorized penetration testing

BoundaryPhysical harm and major disruption blocked

Specialized Access

Authorized scopeNarrowly reviewed high-risk safety work

BoundaryAdditional verification and security requirements

View data

Tier	Authorized scope	Boundary
Defense Access	Incident response, malware and vulnerability checks	Defined defensive scope
Red Team Access	Authorized penetration testing	Physical harm and major disruption blocked
Specialized Access	Narrowly reviewed high-risk safety work	Additional verification and security requirements

Anthropic · published 2026-10-06. Source-bound illustration, not a performance benchmark.

Download image

Anthropic says generally available models retain conservative cyber safeguards, while verification reduces inappropriate blocking for qualifying work. Red Team Access still blocks actions with potential for physical harm or major disruption. Each tier has a defined scope; eligibility is not blanket permission to test any system.