Anthropic backs Project Glasswing with up to $100M in credits and $4M for open‑source security

Project Glasswing: AI turned loose on the plumbing of the internet

Anthropic announced a multi‑company initiative called Project Glasswing that will hand a new, unreleased model — Claude Mythos Preview — to a select group of tech firms and roughly 40 organizations that steward critical software. It has been reported that the model already flagged thousands of previously unknown security flaws during initial testing, including a 27‑year‑old bug in OpenBSD and a 16‑year‑old vulnerability in FFmpeg. Anthropic said it will commit up to $100 million in usage credits for the effort, plus $4 million in direct donations to open‑source security groups.

Why this matters — and why it's urgent

Open source runs the world now. When the libraries and tools undergirding everything from cloud infrastructure to video decoding are riddled with hard‑to‑find bugs, the consequences ripple wide. Project Glasswing aims to give maintainers access to a kind of automated, high‑scale scrutiny that conventional testing missed — the model reportedly caught flaws that static tools and millions of test runs didn’t. The emotional pivot here? Relief and dread at once: relief that defenders finally get better tools, dread because those same capabilities could be turned against us if they leak.

The catch: guarded access and a thin line between defense and misuse

Anthropic says Mythos Preview will not be released to the general public, citing misuse risks. Participating companies — Amazon, Apple, Broadcom, Cisco, CrowdStrike, the Linux Foundation, Microsoft, Palo Alto Networks and others — must share findings back with the broader industry, especially the open‑source maintainers who often lack funding and manpower. Will a $100M credit pool and a few million in donations change the security calculus? Maybe. But as AI arms races accelerate, coordinated moves like this feel less like a luxury and more like damage control. After all, a butterfly‑named project is trying to stop a storm. Will it flap hard enough?

Sources: cyberscoop.com