Individuals can apply for Claude Mythos 5.2 through Anthropic’s Cyber Verification Program (CVP), but only for Defense Access. Red Team and Specialized Access are for organizations. On most products, approval alone does not enable access: an administrator must assign it.
For background on Anthropic’s earlier Mythos access model, see NeoTeo’s coverage of Claude Fable 5.1 and Mythos 5.1.
Choose a tier that fits your work
Anthropic’s CVP guidance distinguishes its tiers by both the work they cover and who can apply.
| CVP tier | Who may apply | Work covered |
| Defense Access | Individuals and organizations | Security operations, incident response, malware analysis, detection engineering, and vulnerability triage and validation |
| Red Team Access | Organizations only | Authorized penetration testing, red teaming, adversary emulation, offensive-tool development, and exploit development; up to 75 approved users |
| Specialized Access | Organizations only | Authorized, high-risk testing of critical systems; up to 25 approved users |
An individual applicant can seek Defense Access without applying through an organization. Individual access covers the approved person; Team-plan access applies across the organization. Red Team and Specialized Access require an organization.
Check your plan, then apply
CVP is unavailable on the Free plan. Anthropic lists Pro, Max, Ultra, Team, Enterprise, and API access for Defense Access. Red Team and Specialized Access require Team, Enterprise, or API access. Mythos use on Pro also requires usage credits.
- Select the tier that matches the work. Choose Defense for defensive security tasks and vulnerability triage; choose Red Team for authorized offensive work. Specialized Access is for authorized high-risk testing of critical systems.
- Apply through Anthropic’s Verification Portal. Submit identity and work information, choose the tier, and accept the program terms. Depending on the tier, Anthropic may also require supporting evidence and an attestation about security controls. An organization submits one application for the organization where it plans to use CVP; approval does not transfer to another organization.
- Wait for the review. Anthropic lists target review times of two days for Defense Access and two weeks for Red Team Access, and says Red Team reviews are taking longer because of demand. Specialized Access has no set target. These are targets, not guaranteed turnaround times.
- Have an administrator enable access in the relevant product. In Console, an administrator assigns CVP to a workspace other than Default. In Enterprise, an administrator assigns access through a custom role. For a cloud provider, link the account or project and activate the approved tier. Anthropic says Mythos access through cloud partners starts about five business days after CVP approval. Amazon Bedrock access requires an Enterprise Frontier Safeguards data-retention exemption under the conditions in Anthropic’s guidance.
Treat eligibility, approval, and activation as three separate checkpoints; completing one does not automatically complete the next.
Know what CVP access allows
CVP adjusts cyber safeguards only. Biology safeguards and Anthropic’s Usage Policy still apply, and permitted work may still encounter refusals or classifier blocks. Internal approval also does not authorize a customer-facing security service or product: Anthropic requires separate approval for external use.
