Bottom line: Project Glasswing has discovered over 10,000 critical security vulnerabilities in critical software in one month. The bottleneck is shifting from detection to verification and remediation of vulnerabilities.
Within Project Glasswing, over ten thousand critical security vulnerabilities in globally critical software were uncovered in just one month. Using the Claude Opus Preview model and approximately 50 partner organizations, the speed of vulnerability detection is changing fundamentally.
Project Glasswing, launched one month ago, pursues the ambitious goal of protecting the world’s most critical software from misuse by increasingly powerful AI models. The results so far are impressive: together with around 50 partners, the team has already discovered over ten thousand security vulnerabilities of high or critical severity.
The bottleneck in software security is thus shifting fundamentally. While progress was previously limited by the speed of vulnerability detection, verification, disclosure, and the deployment of security patches have now become the limiting factor.
The participating organizations, including operators of critical internet infrastructure, report remarkable successes: many partners have already found hundreds of critical gaps in their systems. Cloudflare, for example, identified 2,000 errors (400 of them critical) in its core systems – with a false positive rate that performs better than human testers.
External tests confirm this performance capability: the UK’s AI Security Institute reports that Claude Opus Preview is the first model to fully master their cyber domain simulations. Mozilla discovered over 271 security vulnerabilities in Firefox 150 with the model – more than ten times as many as with the predecessor model Claude Opus 4.6 in Firefox 148.
The project follows established security standards: new vulnerabilities are disclosed 90 days after discovery (or 45 days after a patch is available) to give users time to update. Detailed technical findings are published only after patches are widely distributed.
Source: www.anthropic.com