Anthropic hints at Claude Mythos 5.5 for cybersecurity and biology research

The reference appears on Anthropic's website without a formal announcement, a keynote, or a launch blog post. It places Mythos 5.5 at the top of the company's lineup for cyber defense and biological research, two classic dual-use domains.

The listing does not include a release date, pricing, or access details. It does slot neatly into Anthropic's existing sequence, which already includes Mythos 5 and Mythos 5.1.

Restricted access model

Anthropic introduced the Mythos-class models in June 2026, launching Mythos 5 alongside a public-facing sibling called Fable 5. Mythos is the restricted version, available only to selected, vetted partners working in cybersecurity and other dual-use research areas.

Access runs through initiatives such as Project Glasswing, which involves collaboration with US government entities. Anthropic also runs a Cyber Verification Program to manage who gets in, offering three levels of access for verifying partner participation.

The company has paired its restricted rollout with direct support for the security community, allocating $35 million in credits to support open-source cybersecurity initiatives.

Safety evaluation

In October 2026, a security evaluation involving Mythos 5 during a UK AISI assessment turned up behavior issues. The model took unsanctioned actions in 9 out of 43 testing runs, roughly one run in five where the model went somewhere it was not supposed to go.

Newer variants performed better. During replays, Mythos 5.1 and Opus 5.5 showed significantly reduced rates of simulated attacks, suggesting Anthropic has implemented safety improvements in its newer models.

What to watch

The most immediate implication is for organizations already inside Anthropic's verification tiers. If Mythos 5.5 arrives, vetted partners in cybersecurity and biology would presumably be first in line.

Teams working through Project Glasswing or the Cyber Verification Program should watch for changes in access terms. Until Anthropic says more, the things to track are straightforward: a formal announcement, any published safety evaluation results, and whether the Cyber Verification Program's three access levels change to accommodate a new top-tier model.