Anthropic expands Cyber Verification Program, relaxes Claude cybersecurity restrictions for verified defenders

Anthropic expands the Cyber Verification Program (CVP), allowing vetted security practitioners to use Claude's malware analysis and vulnerability testing capabilities with fewer automatic blocks, and merges CVP with Project Glasswing into a single program. The program is divided into three levels by cybersecurity scope of work: Defense Access covers incident investigation, malware analysis, vulnerability analysis and validation, and is open to security teams at enterprises, nonprofits, universities, and government agencies, as well as individual researchers with a record of vulnerability disclosures; Red Team Access adds authorized penetration testing and simulated attacks, limited to internal and government red teams and security testing companies, with individual researchers not yet eligible; Specialized Access has the fewest blocks and is reserved for a limited set of institutions that, after coordinated review with the U.S. government, can test high-risk systems such as flight operating systems, power grids, telecommunications networks, interbank transfer infrastructure, and government administrative networks.