EU cybersecurity agency ENISA has been granted access to Claude Mythos 5 and GPT-6 Astra; ENISA still lacks access to Mythos 5.1
Anthropic PBC has handed the European Union's cybersecurity agency access to its powerful Mythos artificial intelligence model …
Context & Ripple Effects
ENISA's access follows an April account that European regulators had been largely excluded from Mythos' limited release and June reporting that the agency was expected to join Project Glasswing after EU officials sought access in the US. The agreement turns that proposed channel into an active testing relationship.
The arrangement also exposes a boundary: ENISA can examine Mythos 5 but not Mythos 5.1. That version-level split matters because earlier coverage showed government access to Mythos was already uneven, including CISA's lack of access to Mythos Preview.
First-order effects
- ENISA can test Mythos 5 and GPT-6 Astra for cybersecurity purposes, giving the EU's specialist agency direct visibility into models it had sought to assess.
- ENISA's lack of Mythos 5.1 access leaves its testing coverage incomplete across Anthropic's Mythos releases, even as it gains access to Mythos 5.
Second-order effects
- ENISA's evaluations give EU officials a technical basis for future discussions with Anthropic about model security and access conditions rather than relying only on vendor briefings.
- The model-by-model access split makes access terms a practical issue for other public-sector evaluators: an authorization for one release does not automatically extend to a successor.
Third-order effects
- If governments continue to receive different model versions and testing rights, frontier-model oversight will develop through negotiated bilateral access arrangements rather than a uniform audit regime.
- Cybersecurity evaluation is becoming part of the terms on which AI labs engage states, with control over model availability shaping each regulator's capacity to assess risk.
The trend: Frontier-model access is becoming an instrument of AI statecraft, as governments seek testing rights while labs retain control over which versions they expose.