HackerOne has joined Project Glasswing, Anthropic’s controlled-access program for Claude Mythos 5, as part of an effort to explore how frontier artificial intelligence can improve cyber defense and exposure management.
The cybersecurity company plans to share insights from its use of the model, with a focus on applying advanced AI to real-world security challenges at scale.
HackerOne is using Mythos to strengthen its own defenses while evaluating the model across several stages of Continuous Threat Exposure Management. The work includes confirming whether vulnerabilities can be exploited, prioritising findings based on business impact, and producing developer-ready fixes that can be incorporated into engineering workflows.
“Attackers are already using frontier AI to find and weaponise vulnerabilities faster than defenders can respond. The only viable answer is for defenders to operate on better models, faster. HackerOne’s mission is to empower the world to build a safer internet. Anthropic’s is safer software at scale. Same goal, different vantage point. Project Glasswing lets us put the most capable model available to work on our infrastructure and share what we learn across the full CTEM workflow,” said Kara Sprague, Chief Executive Officer, HackerOne.
The collaboration reflects a broader push within the cybersecurity industry to use advanced AI throughout the vulnerability management process, from identifying potential weaknesses to helping development teams resolve them.
“Building more resilient software requires continuous innovation in how we identify, understand, and remediate risk,” said Nidhi Aggarwal, Chief Product Officer, HackerOne. “We are excited to use Claude Mythos to strengthen the security of our internal systems, explore how frontier AI can strengthen every stage of the CTEM workflow from discovery to remediation, and contribute insights that help the security industry move toward continuous cyber defense.”
HackerOne said its participation in Project Glasswing is limited to improving the security of its own infrastructure and solutions. Claude Mythos 5 will not be used in customer programs or external-facing agentic applications.
