Cross-Industry Cybersecurity Initiative

Securing Critical
Software for the AI Era

Project Glasswing brings together Amazon, Anthropic, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, Microsoft, NVIDIA, and Palo Alto Networks to defend the world's most important software using frontier AI capabilities.

11
Founding Partners
40+
Participating Organizations
$100M
Model Usage Commitment
Thousands
Vulnerabilities Found

Eleven industry leaders, one mission

The world's most important technology and financial institutions have joined together to secure the software that underpins modern society.

Amazon Web Services Anthropic Apple Broadcom Cisco CrowdStrike Google JPMorganChase Linux Foundation Microsoft NVIDIA Palo Alto Networks

A new threshold in cybersecurity

Frontier AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities. Project Glasswing is an urgent attempt to put these capabilities to work for defensive purposes.

Claude Mythos Preview

A general-purpose frontier model that reveals a stark reality: AI has reached a level where it can identify vulnerabilities that have survived decades of human review and millions of automated tests.

Defensive advantage

The same capabilities that make AI models dangerous in the wrong hands make them invaluable for finding and fixing flaws in important software before attackers can exploit them.

Cross-industry collaboration

No single organization can solve these cybersecurity problems alone. Frontier AI developers, software companies, security researchers, and governments all have essential roles to play.

27 yrs
Oldest vulnerability found (OpenBSD)
16 yrs
Oldest vulnerability found (FFmpeg)
5M
Automated test passes before discovery
83.1%
Mythos Preview CyberGym Score

The Glasswing approach to AI-era security

A structured framework that combines frontier AI capabilities with industry expertise to identify, fix, and prevent vulnerabilities at scale.

01

Vulnerability discovery

Claude Mythos Preview autonomously scans critical codebases to identify zero-day vulnerabilities across operating systems, browsers, and infrastructure software.

02

Responsible disclosure

Every vulnerability is reported to the maintainer with a cryptographic hash for verification, and details are revealed only after a fix is in place.

03

Collaborative remediation

Partners work together to patch vulnerabilities, share best practices, and develop automated defense systems that scale across the industry.

04

Industry-wide knowledge sharing

Anthropic commits to publishing public reports on lessons learned, vulnerabilities fixed, and practical recommendations for the evolving security landscape.

Benchmark performance

The powerful cyber capabilities of Claude Mythos Preview are a result of its strong agentic coding and reasoning skills, achieving the highest scores of any model yet developed across a variety of software tasks.

93.9%
SWE-bench Verified
77.8%
SWE-bench Pro
87.3%
SWE-bench Multilingual
82.0%
Terminal-Bench 2.0
94.6%
GPQA Diamond
79.6%
OSWorld-Verified

What industry leaders are saying

"AI capabilities have crossed a threshold that fundamentally changes the urgency required to protect critical infrastructure from cyber threats, and there is no going back. Our foundational work with these models has shown we can identify and fix security vulnerabilities across hardware and software at a pace and scale previously impossible."
Anthony Grieco — SVP & Chief Security & Trust Officer, Cisco
"At AWS, we build defenses before threats emerge, from our custom silicon up through the technology stack. Security isn't a phase for us; it's continuous and embedded in everything we do. We've been testing Claude Mythos Preview in our own security operations, applying it to critical codebases, where it's already helping us strengthen our code."
Amy Herzog — Vice President and CISO, Amazon Web Services
"As we enter a phase where cybersecurity is no longer bound by purely human capacity, the opportunity to use AI responsibly to improve security and reduce risk at scale is unprecedented. Joining Project Glasswing allows us to identify and mitigate risk early and augment our security and development solutions."
Igor Tsyganskiy — EVP of Cybersecurity and Microsoft Research, Microsoft
"The window between a vulnerability being discovered and being exploited by an adversary has collapsed — what once took months now happens in minutes with AI. Claude Mythos Preview demonstrates what is now possible for defenders at scale, and adversaries will inevitably look to exploit the same capabilities."
Elia Zaitsev — Chief Technology Officer, CrowdStrike
"Open source maintainers — whose software underpins much of the world's critical infrastructure — have historically been left to figure out security on their own. By giving the maintainers of these critical open source codebases access to AI models that can proactively identify and fix vulnerabilities at scale, Project Glasswing offers a credible path to changing that equation."
Jim Zemlin — CEO, The Linux Foundation
"Promoting the cybersecurity and resiliency of the financial system is central to JPMorganChase's mission, and we believe the industry is strongest when leading institutions work together on shared challenges. Project Glasswing provides a unique, early stage opportunity to evaluate next-generation AI tools for defensive cybersecurity."
Pat Opet — Chief Information Security Officer, JPMorganChase
"Google is pleased to see this cross-industry cybersecurity initiative coming together and to make Mythos Preview available to participants via Vertex AI. We have long believed that AI poses new challenges and opens new opportunities in cyber defense, which is why we have built AI-powered tools to find and fix critical software flaws."
Heather Adkins — VP of Security Engineering, Google
"Over the past few weeks, we have had access to the Claude Mythos Preview model, using it to identify complex vulnerabilities that prior-generation models missed entirely. This is not only a game changer for finding previously hidden vulnerabilities, but it also signals a dangerous shift where attackers can soon find even more zero-day vulnerabilities."
Lee Klarich — Chief Product & Technology Officer, Palo Alto Networks

Frequently asked questions

The fastest answers to the questions people ask first about Project Glasswing, Claude Mythos Preview, and how to participate.

What is Project Glasswing?
Project Glasswing is a cross-industry initiative that brings together Amazon Web Services, Anthropic, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks. It is named after the glasswing butterfly (Greta oto), whose transparent wings allow it to hide in plain sight — much like the vulnerabilities this project aims to address, and the transparency it advocates for in cybersecurity.
What is Claude Mythos Preview?
Claude Mythos Preview is a general-purpose, unreleased frontier model trained by Anthropic that has demonstrated remarkable capabilities in finding and exploiting software vulnerabilities. It has already found thousands of high-severity vulnerabilities, including some in every major operating system and web browser.
How can I join Project Glasswing?
Organizations that build or maintain critical software infrastructure can apply for access to Claude Mythos Preview through Project Glasswing. Anthropic has committed up to $100M in usage credits for Mythos Preview across these efforts. Click "Join the Initiative" above to get started.
What types of vulnerabilities has Mythos Preview found?
Mythos Preview discovered a 27-year-old vulnerability in OpenBSD, a 16-year-old vulnerability in FFmpeg (in code that automated testing tools had hit five million times), and chained together several vulnerabilities in the Linux kernel to escalate from ordinary user access to complete control of the machine.
Will Claude Mythos Preview be made generally available?
Anthropic does not plan to make Claude Mythos Preview generally available, but the eventual goal is to enable users to safely deploy Mythos-class models at scale for cybersecurity and other beneficial purposes.
How is vulnerability disclosure handled?
All vulnerabilities are responsibly disclosed to maintainers. Details and cryptographic hashes are shared immediately with affected parties, and public disclosure only occurs after a fix has been deployed.
What is Anthropic's financial commitment?
Anthropic has committed up to $100M in model usage credits for Mythos Preview across Project Glasswing participants, as well as $4M in direct donations to open-source security organizations including the Alpha-Omega Project, OpenSSF, and the Apache Software Foundation.

Help secure the world's critical software

The work of defending the world's cyber infrastructure might take years. For cyber defenders to come out ahead, we need to act now.

Get Started with Project Glasswing