Cyber Verification Program

This article explains what the Cyber Verification Program (CVP) is, who can join, how to apply, and how to turn on access after you're approved.

The Cyber Verification Program lets verified security professionals use our most capable models for advanced security work with fewer interruptions from our cyber safeguards.

You don’t need CVP for everyday secure development. You can use our generally available models to review code, patch known issues, and triage security alerts.

You may need CVP if Claude blocks your security work, such as validating exploits or running authorized penetration tests. Organizations can apply for any tier. Individuals, such as independent researchers, open-source maintainers, and bug bounty hunters, can apply for Defense Access.

Every tier includes Claude Mythos, Opus, and Sonnet models starting with Claude Mythos 5.2, Claude Mythos 5.1, Claude Opus 5.5, and Claude Sonnet 5.5. CVP adjusts the safeguards on these models based on your tier. Our Usage Policy still applies in full.

Below we share an overview of the three access tiers in the Cyber Verification Program: Defense Access, Red Team Access, and Specialized Access.

We prohibit some activity in every tier, including:

Defense Access suits most critical infrastructure operators. Operating critical infrastructure doesn’t by itself qualify organizations for Specialized Access.

Data retention is required for everyone enrolled in the program so that we can help monitor and mitigate cyber misuse. If your organization has a data retention exemption for Claude Fable or Claude Mythos models, you can use CVP with zero data retention (ZDR) on all models in the program for internal use.

Once Enterprise Frontier Safeguards (EFS) is generally available, eligible organizations can store data in cloud infrastructure they control. Register your interest in EFS.

By default, CVP is only allowed for internal use. A separate application is required for external use:

Defense Access

Ensure your organization can attest it has the following security controls in place: multi-factor authentication (MFA) and API keys replaced at least every seven days.

You’ll complete identity verification (business verification for organizations), describe your security work, and accept the terms.

Red Team Access

Ensure your organization can attest it has the following security controls in place: phishing-resistant MFA, API keys replaced at least every seven days, company-domain accounts, organization-controlled devices, outbound network controls, and background checks.

Then, find the row that describes your situation, and prepare the relevant information. Matching a row doesn’t guarantee approval.

Specialized Access

We review every Specialized Access application in depth in collaboration with the US government. This tier is for organizations specifically focusing on red teaming systemically important infrastructure. Most critical infrastructure organizations working on defense do not need Specialized Access. To qualify, you'll need to show that you're authorized to test these types of systems and detail the activities you can't accomplish in the Red Team Access tier.

If you're applying for Specialized Access, ensure your organization can attest it has the following security controls in place: phishing-resistant MFA, API keys replaced at least every seven days, company-domain accounts, organization-controlled devices, outbound network controls, and background checks, plus single sign-on and managed devices with malware protection.

Each service or product you offer needs its own approval. You can apply once your organization is approved for a CVP tier.

Apply in the Verification Portal. The portal walks you through verification, your tier, any evidence your tier needs, and the program terms.

You'll verify as a business or an individual. Choose carefully, because the type of verification affects your application:

If you use Claude, Claude Code, or the Claude API directly through Anthropic, follow these steps:

If you use Claude Platform on AWS, Claude Platform on Google Cloud, Google Cloud Agent Platform, Amazon Bedrock (if eligible for EFS), or Microsoft Foundry, follow these steps:

Then, follow these steps with your cloud provider account:

You must be an Owner or Primary Owner of a Claude account or an Admin of a Claude Console account that’s approved for CVP. Then you can:

We’ll email you with a decision or a request for more information. To check your status, sign in to the Verification Portal, open Programs, and choose "Cyber Verification Program." If your review takes longer than the target, you don't need to reapply or contact support.

If you apply for Red Team Access or Specialized Access and qualify for a lower tier, you will receive access to the lower tier while we review the rest of your application.

You can keep using our generally available models, along with any tier you did get approved for.

You also can reapply after seven days. This is the best option if something has changed or you can provide stronger evidence to support your application. Check that you’re applying from the right account and completed the right kind of verification, business or individual.

We may review, narrow, or withdraw program access at any time in our sole discretion if we see activity that violates our policies.

Claude Console

To turn on access to CVP in Claude Console:

For details, see assign a program to workspaces.

Claude Enterprise

To turn on access to CVP in Claude Enterprise:

For details, see assign a program to a custom role.

Google Cloud Agent Platform

To turn on access to CVP in Google Cloud Agent Platform, repeat these steps for each project:

Claude Mythos on cloud providers

Access to Mythos on cloud partners starts about five business days after you’re approved for CVP. If you have a committed contract with Anthropic, your account team will send you a short form. Complete it, then accept the private offer in your cloud marketplace. We’ll provision Mythos once both steps are done.

If you’re approved for more than one tier, treat each grant like any other privileged access. Keep each grant in its own workspace, role, or cloud account.

Ask your admin to confirm they’ve assigned you access. If you use Claude Console, check that you’re in the workspace with the program applied. Then check that the work falls within your tier.

Yes, if you applied as an organization. You’ll keep Defense Access while we review your application.

Yes. Each Claude organization needs its own application. Within one organization, you can assign programs by workspace (Console) or role (Enterprise). Team plans can’t split access between users.

Not by itself. You need a CVP tier and approval for external use, usually as a managed service.

In Claude Console, yes. CVP applies only to the workspaces you assign it to, and it can’t be the Default workspace. Assign it to a workspace used only for internal work, and keep customer traffic in a separate workspace without CVP. To use CVP for customer traffic, you need approval for external use.

On Team plans, access applies to your whole organization, so you can’t limit it to internal work. Don’t serve customers from an organization with CVP access until we’ve approved that service or product for external use.

Bedrock doesn’t yet support human review of automated safety flags, which CVP requires by default. For now, CVP on Bedrock is available only to organizations with a data retention exemption. Once Enterprise Frontier Safeguards (EFS) is available, Bedrock organization in the EFS program can apply for CVP access. To register your interest in EFS, use this Enterprise Frontier Safeguards form. In the interim, we're working to expand CVP to Bedrock customers. Contact your account team to ask about an exemption.

Mythos models follow the same usage rules as Claude Fable models.

Yes. You can download your application and terms as a PDF from the program page in the Verification Portal.

Yes. You don’t need to reapply. Your admin adds them to the workspace (Console) or custom role (Enterprise) that has the program, up to your tier’s limit. For Red Team Access and Specialized Access, you can add only people on the team named in your application. Everyone you add must meet your tier’s security requirements.

Yes. Link the new account to the same Anthropic organization in the Verification Portal. You don’t need a new application. On Amazon Bedrock and Google Cloud Agent Platform, you also need to turn on your tier for the new account.

No. CVP adjusts only our cyber safeguards. Our safeguards from other domains like research biology still apply in every tier. Our Usage Policy still applies in full.

No. You can review and edit your answers until you submit, but you can’t edit or cancel an application after that. If you’re not approved, you can reapply after seven days.

Apply again from the organization where you’ll use CVP, or ask your account team for help.