Claude Mythos 5
C Tier · 6.5/10
Anthropic's unrestricted frontier model -- launched June 9, 2026 alongside Claude Fable 5 (the same model made safe for general use). Suspended June 12 by a US export-control order, then PARTIALLY RESTORED July 1, 2026 (US government lifted controls June 30): Mythos 5 is back for a set of US organizations with government approval, while Anthropic works to re-expand the broader Glasswing program. Public Fable 5 returned globally the same day. Gated to Project Glasswing orgs + select biology researchers.
Score Breakdown
Personality & Tone
The gated red-team specialist
Tone: When Anthropic does publish Mythos outputs (in sanitized research reports), the voice is careful, technically dense, and deliberately unperformed -- much more 'senior security researcher writing an internal memo' than Claude Opus's conversational style.
Quirks: Mythos is tuned to produce its cybersecurity reasoning with extensive show-your-work traces. Anthropic publishes some outputs with full CoT visible as evidence of capability claims. Outside of security tasks, the model reportedly sounds much like Opus 4.6 / 4.7 -- Anthropic hasn't published a distinct general-purpose voice for Mythos.
The Good and the Bad
What we like
- +The most capable Anthropic model available -- meaningfully stronger than Opus 4.7 on cybersecurity reasoning, long-horizon autonomy, and multi-step attack/defense planning per Anthropic's published evaluations
- +73% success rate on expert-level Capture-the-Flag tasks -- a benchmark other frontier models (GPT-5.x, Gemini 3.1 Pro, Opus 4.7) are well below
- +Autonomously executes 32-step network attacks in Anthropic's red-team evals -- demonstrates sustained agentic capability on security tooling without losing track
- +Paired with Project Glasswing: a coalition model where 8 founding enterprise partners get controlled access, $100M in credits, and shared threat intelligence
What could be better
- −Not available to the public. If you're reading this thinking you might use it: you probably can't. Invite-only rollout to ~50 orgs with active cybersecurity or research commitments
- −Even if you are in a Glasswing partner org, access is heavily gated -- deployment requires explicit use-case approval and extensive safety review
- −Specialized for security work. Anthropic explicitly notes Mythos is 'less broadly capable' than Opus 4.7 outside the cyber domain -- so it is NOT the answer for general coding, writing, or analysis work
- −Anthropic withholding the weights and API access is a policy call, not a technical one. This is the first time a frontier Claude model has been deliberately kept out of the API, signaling a new safety/release posture you should expect to see repeat
Pricing
Project Glasswing (Gated)
- ✓Mythos 5 (launched 2026-06-09) restricted to Project Glasswing partners -- expanded to ~150 orgs as of 2026-06-02 -- plus select biology researchers
- ✓Mythos Preview users can upgrade to Mythos 5 immediately
- ✓Founding partners: Amazon, Apple, Google, Cisco, CrowdStrike, JPMorgan, Microsoft, Nvidia
- ✓Broader trusted-access program for cybersecurity + biomedical research planned
- ✓Mandatory 30-day retention on all Mythos-class traffic (not used for training)
Public access (via Claude Fable 5)
- ✓Fable 5 (2026-06-09) is the same underlying model 'made safe for general use' -- classifiers route cyber/bio/chem requests to Opus 4.8 (<5% of sessions)
- ✓Included on Claude Pro/Max/Team/Enterprise at no extra cost through 2026-06-22, usage credits after
- ✓See /tools/claude for the full Fable 5 review
Known Issues
- PARTIALLY RESTORED (2026-07-01): The US government **lifted the export controls on June 30**. Anthropic redeployed the public **Fable 5 globally on July 1**, but **Mythos 5 came back only partially** -- 'restored access to Mythos 5 for a set of US organizations, following the US government's approval.' Anthropic says it is continuing efforts to 'expand access to the broader set of domestic and international partners in the Glasswing program,' so non-US and many international Glasswing partners may still be waiting. The re-launch shipped a new safety classifier that blocks the reported jailbreak technique in >99% of cases. Net: Mythos 5 is available again, but on a narrower, government-approved US footprint than before the suspension.Source: Anthropic (anthropic.com/news/redeploying-fable-5), CNBC (2026-06-30) · 2026-07-01
- MYTHOS PREVIEW RETIRED (2026-06-30): Per Anthropic's deprecations page, **Claude Mythos Preview reached its retirement date on June 30, 2026** -- Glasswing partners still on the Preview snapshot must now use `claude-mythos-5`. With Fable 5 public and Mythos 5 live, the Preview era is formally closed.Source: Anthropic model deprecations page (platform.claude.com/docs/en/about-claude/model-deprecations) · 2026-06-30
- ACCESS SUSPENDED BY US GOVERNMENT (2026-06-12; RESOLVED 2026-07-01 -- see restoration entry above): A US government export-control directive ordered Anthropic to **suspend all access to Claude Mythos 5 and Claude Fable 5** for any foreign national (inside or outside the US, including foreign-national Anthropic employees). To comply, Anthropic **disabled both models for all customers** -- including, per the directive's scope, Project Glasswing partners. Access to all other Anthropic models is unaffected. The Commerce Department acted after another company claimed it had 'jailbroken' Mythos, raising national-security concerns; Anthropic disagrees and met with the Trump administration on 2026-06-15 to contest the order. This is the first frontier model pulled from access by US-government directive -- a landmark moment for AI export control and the open-vs-closed debate (CNBC framed it as 'a big moment for open-source AI'). Watch for restoration or appeal terms.Source: Anthropic (anthropic.com/news/fable-mythos-access), CNBC (2026-06-12, 2026-06-15, 2026-06-16), TechCrunch, Axios · 2026-06-12
- RETIREMENT DATE SET (verified 2026-06-11): **Claude Mythos Preview retires June 30, 2026** per Anthropic's deprecations page -- Glasswing partners still on the Preview snapshot must migrate to claude-mythos-5 before then. With Fable 5 public and Mythos 5 live, the Preview era formally closes out at the end of the monthSource: Anthropic model deprecations page (platform.claude.com/docs/en/about-claude/model-deprecations) · 2026-06-11
- MODEL LAUNCH (2026-06-09): **Claude Mythos 5** replaces Mythos Preview as the Glasswing-track model -- same underlying model as the publicly available Claude Fable 5, with safeguards lifted in certain areas for vetted partners. Existing Mythos Preview users upgrade immediately. Anthropic simultaneously made the Mythos class public for the first time via Fable 5 ($10/$50 per 1M, plan-included through 6/22), with classifier fallback to Opus 4.8 on cybersecurity, bio/chem, and distillation-attempt requests. All Mythos-class traffic now carries mandatory 30-day retention, overriding zero-data-retention agreements (not used for training)Source: Anthropic news (anthropic.com/news/claude-fable-5-mythos-5), TechCrunch, CNBC · 2026-06-09
- Mythos's cybersecurity capability is the reason for its gated release. Anthropic's red-team evaluations showed the model could plan end-to-end network intrusion chains, which Anthropic deemed too risky for open API accessSource: Anthropic Project Glasswing announcement, Axios, CNBC, Schneier on Security · 2026-04
- Naming history: 'Claude Mythos Preview' was the April 2026 product name (internal codename Capybara); the 'Mythos 5' name became official with the 2026-06-09 launch, aligning with Fable 5 (there was never a Mythos 1-4)Source: Axios, Fortune, Anthropic news · 2026-06
- Access applications are not open -- Anthropic is approaching partner orgs directly rather than accepting inbound requestsSource: Anthropic Glasswing page · 2026-04
- Axios reported 2026-04-19 that the NSA is among the ~40 orgs with Mythos access, despite the Pentagon's formal supply-chain risk designation of Anthropic. Dario Amodei reportedly met with W.H. Chief of Staff Susie Wiles and Treasury Secretary Scott Bessent on 2026-04-17. Material context if you are evaluating Mythos / Glasswing in a federal or defense-adjacent procurement -- the political posture inside the US government is not uniformSource: Axios, TechCrunch, Engadget · 2026-04
Best for
Partner organizations in Project Glasswing doing cybersecurity research, defensive red-teaming, threat intelligence, or large-scale vulnerability triage. If your use case is legitimate cybersecurity and you have enterprise Anthropic contact, ask about Glasswing admission.
Not for
Everyone else -- but as of June 9, 2026 'everyone else' gets Claude Fable 5 (see /tools/claude): the same Mythos-class model made safe for general use, on the API and included in paid plans through June 22.
Our Verdict
UPDATE (July 1, 2026): the suspension is over. The US government lifted the export controls on June 30; public Fable 5 returned globally on July 1, and Mythos 5 was restored -- but only partially, to a set of US organizations with government approval, while Anthropic works to re-admit the broader (and international) Glasswing base. So Mythos 5 is available again, on a narrower footprint than before, and Mythos Preview formally retired June 30. The pre-suspension picture, for context: the Mythos story changed on June 9, 2026. What began in April as a deliberately withheld cybersecurity preview is now a two-track release: Mythos 5 for ~150 vetted Glasswing orgs and select biology researchers with safeguards lifted, and Claude Fable 5 for the public -- the same model with classifier-enforced fallbacks to Opus 4.8 on dangerous-capability requests. That makes this page's subject the gated track only. If you're in Glasswing, Mythos 5 is an immediate upgrade from Mythos Preview. If you're not, you no longer have to wonder what you're missing: Fable 5 IS the Mythos class, minus the <5% of sessions that touch cyber/bio/chem territory. The deeper signal stands -- Anthropic now ships its frontier in safety-differentiated tiers, and the 30-day mandatory retention on all Mythos-class traffic shows what public access to this capability level costs in privacy terms.
Sources
- Anthropic: Redeploying Fable 5 (Mythos 5 partially restored 2026-07-01) (accessed 2026-07-04)
- Anthropic: Statement on the US government directive to suspend access to Fable 5 and Mythos 5 (2026-06-12) (accessed 2026-06-18)
- CNBC: Anthropic's Fable shutdown is a big moment for open-source AI (2026-06-16) (accessed 2026-06-18)
- Anthropic: Introducing Claude Fable 5 and Claude Mythos 5 (2026-06-09) (accessed 2026-06-09)
- Anthropic: Project Glasswing (accessed 2026-04-17)
- Anthropic Red: Mythos Preview (accessed 2026-04-17)
- Fortune: Anthropic's Mythos model + Project Glasswing (accessed 2026-04-17)
- Axios: Anthropic releases Opus 4.7, concedes it trails unreleased Mythos (accessed 2026-04-17)
- Schneier on Security: On Mythos Preview and Project Glasswing (accessed 2026-04-17)
- CNBC: Anthropic Opus 4.7 less risky than Mythos (accessed 2026-04-17)
- Axios: NSA uses Mythos despite Pentagon feud (2026-04-19) (accessed 2026-04-20)
- TechCrunch: NSA spies reportedly using Anthropic Mythos (accessed 2026-04-20)
Explore more Claude Mythos 5 rankings
Deeper leaderboards, benchmarks, task-specific tier lists, and status/pricing pages for Claude Mythos 5.
The Tier List Tuesday
Weekly newsletter: tier movers, new entrants, and the VS of the week. Built from our daily AI-tool sweeps. No spam, unsubscribe anytime.
Alternatives to Claude Mythos 5
Claude (Anthropic)
Anthropic's flagship LLM family. After a 19-day US-government export-control suspension (June 12-30), Claude Fable 5 -- the first publicly available Mythos-class model -- returned globally on July 1, 2026. New on June 30: Claude Sonnet 5, the 'most agentic Sonnet yet,' now the default on Free/Pro at $2/$10 per 1M (intro through Aug 31, then $3/$15). Opus 4.8 remains the top-end flagship at $5/$25 per 1M with a 1M-token context, effort control, and a cheap fast mode
Gemini (Google)
Google's LLM with deep Google Workspace integration, 2M token context window, and native code execution -- Gemini 3.5 Flash GA 2026-05-19 (I/O 2026, now with native computer use), Gemini 3.5 Pro still unshipped as of July 2026 (slipped past its June window), Gemini Spark agent + Managed Agents public preview in the Gemini API
Grok
SpaceXAI's irreverent chatbot with a direct line to X/Twitter -- and now Grok 4.5 (launched 2026-07-08), the frontier MoE model trained jointly with Cursor for coding, agentic tasks, and knowledge work at $2/$6 per 1M tokens. Grok 4.3 remains the value tier at $1.25/$2.50
Muse Spark (Meta)
Meta's first model from its Superintelligence Lab -- natively multimodal with Contemplating mode for multi-agent reasoning
GPT-Rosalind (OpenAI)
OpenAI's first domain-specific model -- life sciences, drug discovery, translational medicine. Launched 2026-04-16 as a Trusted Access research preview. Launch partners: Amgen, Moderna, Allen Institute, Thermo Fisher. Paired with a Life Sciences Codex plugin (50+ scientific tool integrations)
GPT-5.4-Cyber (OpenAI)
OpenAI's defensive-cybersecurity variant of GPT-5.4, launched 2026-04-16. Lowered refusal boundary for security-research tasks and native binary reverse-engineering. Access gated via Trusted Access for Cyber (TAC) program -- thousands of verified defenders, hundreds of teams, no public pricing
Microsoft MAI-Thinking-1
Microsoft's first in-house reasoning model -- launched 2026-06-02 at Build as the flagship of seven new MAI models. 35B-active / ~1T-total sparse Mixture-of-Experts, 256K context. AIME 2025 97.0%, matches leading models on SWE-Bench Pro, and beat Claude Sonnet 4.6 in human-preference testing. Available on Microsoft Foundry + OpenRouter / Fireworks / Baseten
Hunyuan 3 (Tencent Hy3)
Tencent's Hy3 Preview launched 2026-04-23 -- 295B total / 21B active MoE, 256K context, open-sourced on HuggingFace under tencent/Hy3-preview. Cheapest frontier-class API at ~1.2 RMB per million input tokens. Integrated into Yuanbao, WeChat, QQ
MiMo (Xiaomi)
Xiaomi's MiMo-V2.5 family launched 2026-04-22 -- Pro (1T total / 42B active MoE, 1M context, native vision+audio reasoning), Multimodal base, TTS (3 sub-models: base, VoiceDesign, VoiceClone), and ASR (open-source, English + Chinese + major dialects). Full voice pipeline for the agent era. Extra-charge 1M-context tier removed at launch