Anthropic expands its cybersecurity verification programme, using tiered reviews to provide defensive and authorised testing capabilities
Anthropic divides access to cybersecurity models into Defense, Red Team and Specialized tiers, reviewed against scope and verification requirements. Greater model capability does not authorise unrestricted testing of third-party systems. Data retention terms also need separate assessment.
Source Facts
On 6 October, Anthropic announced an expanded Cyber Verification Program, consolidating previous programmes so eligible defence teams can apply for different access tiers. It distinguishes defensive work, authorised red teaming and testing of high-risk systems.
Each tier has different organisation-verification and security controls, and red-team use remains limited to authorised systems. The announcement also specifies data retention requirements for participants. Other privacy options that were still being previewed should not be treated as widely available.
Before adopting highly capable cybersecurity models, service providers need to check testing authorisation, customer data handling and supplier review requirements together.
Original sources
Expanding the Cyber Verification Program
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
IllustrationSOCRadar examines SI agent-assisted extortion: human approval remains part of the intrusion process
Illustration