Published on
Brussels has finally obtained access to Anthropic’s most powerful model, whose availability had been restricted due to its advanced hacking capabilities. But the request took over three months to bear fruit.
“Following our constructive engagement with Anthropic, we can confirm that the EU’s cybersecurity agency ENISA has been granted access to Mythos 5 and is testing it now,” said the European Commission’s spokesperson for tech sovereignty, Thomas Regnier.
In April, the leading AI lab launched a preview of Mythos 5, a model capable of identifying and exploiting cyber vulnerabilities with unprecedented speed, making it a formidable hacking tool.
Given its cybersecurity implications, Anthropic restricted access to the model to a select number of partners via Project Glasswing, run in collaboration with the US government.
The programme started with around 50 organisations in April before Anthropic expanded it by some 150 more in June, bringing the total to roughly 200 partners. The US government subsequently introduced export control measures barring access to non-American users worldwide — including Anthropic’s own employees outside the US.
The move prompted the European Commission to question whether it was discriminatory towards a trusted partner, fuelling concern that Washington was both capable and willing to trigger a “kill switch” on the latest US technologies.
Brussels continued pressing Anthropic for access, which was finally granted on Thursday. The Commission holds significant regulatory powers under the EU AI Act, powers that may make tech companies wary of sharing information that could later surface in infringement proceedings.
“ENISA has previously received access to OpenAI’s GPT-5.6-Cyber model. Access was also granted to the latest OpenAI model, GPT-6 Astra,” Regnier said.