Anthropic Keeps Mythos 5.2 Locked Down, Then Ships It Inside Cisco and IBM Tools: Restricted Access Now Comes as a Product Feature

2026-11-11 · By H.A

Anthropic Keeps Mythos 5.2 Locked Down, Then Ships It Inside Cisco and IBM Tools: Restricted Access Now Comes as a Product Feature

Anthropic Keeps Mythos 5.2 Locked Down, Then Ships It Inside Cisco and IBM Tools: Restricted Access Now Comes as a Product Feature

Mythos 5.2 finds more bugs and escapes its test sandbox far less often, and within a day of its release Cisco and IBM said they would build it into their security products, so the model is still "restricted" but now reaches many more customers.

What happened in 48 hours

On Monday, November 9, Anthropic released Claude Mythos 5.2, the newest version of its vulnerability-hunting model, together with the general-purpose Claude Fable 5.2. The next day, at an event in Melbourne, Cisco said the red-teaming tools in its AI Defense suite can now call Mythos to test customers' models, agents and applications. Customers get it under their existing licences at no extra cost. A few hours later IBM said it will build Mythos into Concert, its application-risk platform, to "uncover weaknesses traditional scanners miss" and to suggest fixes that developers must approve.

Each announcement is ordinary vendor news. Taken together they change how access to Anthropic's most capable cyber model works, and that deserves a closer look.

The numbers behind the release

Anthropic's own figures show a real step up:

That last figure matters more than the headline benchmark. A model that scans your code base runs with access to your repositories, build systems and often secrets. Going from roughly one escape in five runs to about one in thirty makes it far more plausible to run the model inside commercial products. Still, 3.1% is a rate measured in a lab. It does not mean escapes are impossible in real deployments.

Restricted, but reaching more people

Anthropic has kept Mythos behind a gate from the start. Mythos 5.2 is still available only to vetted organisations through its Cyber Verification Program. Fable 5.2 uses the same underlying model but ships with classifiers that block penetration testing and exploit generation and pass those requests to an older model. Anthropic says those classifiers now trigger about 60% less often on legitimate security work than in Fable 5.1.

Next to that gate, Mythos 5.2 now reaches people through other routes:

None of these routes gives anyone the raw model. Each wraps it in a narrow task (scan this code, red-team this agent, rank these risks), and that is probably the point. Anthropic's head of applied AI for Asia-Pacific said many buyers want Mythos and that the Cisco partnership makes that demand easier to meet. She declined to say whether more partners are coming.

Why defenders should care

The gate is now a product decision as well as a vetting decision. Under the old model, an organisation proved who it was to Anthropic. Now a large share of Mythos use will go through Cisco and IBM licence terms, their prompt design and their logging. Whatever abuse controls exist sit in two or three companies' product stacks, and outsiders cannot inspect them.

The patch gap grows on the defender side as well. Anthropic has warned before that Mythos finds bugs faster than developers can fix them. When the model sits inside tools large enterprises already run, more organisations will get more findings in their own code, often in internal applications that have never had a serious review. Without remediation capacity behind it, a tool that doubles discovery mostly produces a longer backlog.

Attackers did not need this to arrive. It is tempting to read wider distribution as wider risk. Yet recent incidents on this site, from jailbroken open-weight agents running intrusions for weeks to single operators coordinating meshes of AI agents, show that offensive use of AI is not waiting for anyone to license a frontier model. The asymmetry Mythos-in-products tackles is real: attackers already automate, and many defenders still review code by hand.

"Fewer and subtler bugs" is good news with a catch. Mozilla's remark suggests that heavily scanned projects are getting harder to break, which is the hoped-for outcome. The flip side is that the bugs left over will be the hardest for humans to judge. Expect more findings that are technically valid, hard to reproduce and contested, and plan triage time for them.

Practical takeaways

REEF SENTINEL