Project Glasswing: ENISA and NATO Join AI Security Program
Anthropic expanded Project Glasswing to 200 partner organizations on June 2, 2026. The key development: ENISA is the first EU institution outside the US and UK to receive access to Claude Mythos. Germany is explicitly included. For European enterprises in NIS2-regulated sectors, this has direct strategic consequences.
Project Glasswing has found over 23,000 security vulnerabilities in systemically important software since its launch on April 7, 2026. On June 2, 2026, Anthropic expanded the program to 200 partners across 15 countries, including for the first time the EU cybersecurity agency ENISA and NATO. ENISA is the first institution outside the US and UK with access to Claude Mythos, the result of intensive US-EU negotiations. For European critical infrastructure operators, this matters because ENISA as a Glasswing participant will develop guidelines that influence NIS2 compliance.
From 50 to 200: What Changed on June 2, 2026
Project Glasswing launched on April 7, 2026, with around 50 partner organizations, predominantly US technology companies including Apple, Google, Microsoft, AWS, and CrowdStrike. These organizations used Claude Mythos to scan their own codebases for security vulnerabilities. The result: over 23,000 vulnerabilities in systemically important software, more than 10,000 rated "high" or "critical" severity. On June 2, 2026, Anthropic announced a significant expansion of the program.
The 150 new members come from more than 15 countries and cover sectors that were barely represented in the first round. Explicitly named new partners: ENISA, NATO, US identity provider Okta, and South Korean conglomerates Samsung, SK Hynix, and SK Telecom. Germany is explicitly listed as one of the 15+ countries.
Glasswing Launch
Anthropic launches Project Glasswing with 12 founding partners and around 40 additional organizations. Claude Mythos autonomously finds thousands of security vulnerabilities in the first weeks.
Formal US-EU Session
The US and EU Commission hold a formal coordination session to establish the terms for ENISA's access to Claude Mythos.
Expansion to 200 Partners
Anthropic announces expansion to 200 organizations in 15+ countries. ENISA receives access to Claude Mythos as the first EU institution. NATO and Germany are included.
ENISA as Glasswing Partner: First Access Outside US and UK
The admission of the European Union Agency for Cybersecurity marks a geopolitically significant moment: it is the first institution outside the US and UK to receive access to Claude Mythos. Claude Mythos is not publicly available because Anthropic considers the misuse risk too high. Every access grant is therefore a negotiated result, not a given.
What ENISA Will Do With Access
ENISA will use Claude Mythos to scan critical infrastructure across the European Union for vulnerabilities. The geographic scope covers all EU member states. As a Glasswing participant, ENISA will publish findings and recommendations in the coming months. For NIS2-regulated companies, this matters: ENISA's guidance has direct influence on national supervisory authorities.
BSI: In Direct Contact with Anthropic
Germany's Federal Office for Information Security (BSI) is reportedly in direct contact with Anthropic. Whether and when the BSI will officially become a Glasswing participant remains open. Once it does, concrete requirements or recommendations for critical infrastructure operators in Germany will follow. This development should be monitored closely.
For the EU digital sovereignty debate, the signal is ambivalent: Europe gains access to the leading AI security tool, but under US terms and US governance. For practical purposes, the benefit outweighs the concern - access is better than exclusion.
Critical Infrastructure Under Scrutiny
The new Glasswing sectors correspond exactly to the categories the NIS2 Directive classifies as "essential entities": energy, water, healthcare, communications, and digital infrastructure. For European enterprises, this creates a direct link between the Glasswing program and their regulatory obligations. NIS2 has been in force across EU member states since late 2024 and mandates active vulnerability management and incident reporting within 24 hours.
Each partner organization in Glasswing would affect over 100 million people if their infrastructure were successfully attacked, according to Anthropic. This is not an abstract risk: a single attack on an unpatched, known vulnerability compromised more than 2,500 organizations across 106 countries fully automatically in 2025.
"What each partner has in common is that a successful attack on their codebase could be catastrophic."
The New Standard: AI Security Scanning as Regulatory Expectation
The Glasswing expansion sets a new benchmark for everyone providing security services to critical infrastructure operators: AI-powered vulnerability scanning is becoming an expectation, not an option. This has consequences for security teams, managed security providers, and regulators. OpenAI has in parallel given selected partners test access to GPT-5.5-Cyber - competition for the standard in AI-powered cybersecurity in Europe has begun.
The Core Problem: Finding Is Not the Same as Fixing
Fewer than 1 percent of vulnerabilities found by Claude Mythos have been patched so far. This shows the bottleneck is no longer discovery but remediation speed. The median time from vulnerability disclosure to a weaponized exploit dropped from 771 days in 2018 to just hours in 2024. Finding vulnerabilities without fixing them creates transparency for attackers.
Criticism: Who Benefits, Who Does Not
The Glasswing program favors large technology companies and government agencies. Smaller open-source projects and SMEs have no direct access. IBM has announced commercial extensions based on Glasswing findings - the ecosystem of commercial AI security products is building on the program's results without giving everyone the same access. The question of responsibility for disclosure also remains unresolved: who decides when a vulnerability found by Mythos is made public, when thousands are found simultaneously?
What Organizations Should Do Now
For European enterprises in NIS2-regulated sectors, June 2, 2026 carries a clear message: ENISA and national cybersecurity agencies are now actively integrated into the leading AI security program. What ENISA publishes as a result of its Glasswing work will influence regulatory requirements across Europe.
Five Steps to Prepare
-
Measure Patch Velocity
Determine how long it currently takes from discovering a critical vulnerability to fixing it. This baseline determines whether your operations can meet the NIS2 reporting obligation (24 hours).
-
Monitor BSI and ENISA Announcements
Once the BSI officially joins the Glasswing program, requirements or recommendations for critical infrastructure operators will follow. Plan resources now to implement these.
-
Make Vulnerability Management AI-Ready
Traditional penetration tests deliver one result per quarter. AI-powered scanning delivers thousands of findings per week. Check whether your MSSP or internal team is prepared for this volume.
-
Evaluate ENISA Publications
ENISA will incorporate Glasswing findings into guidelines and recommendations. For NIS2-regulated organizations, these are not optional - subscribe to the ENISA newsletter and plan an annual compliance review.
-
Read the Background Articles
A detailed analysis of Project Glasswing and Claude Mythos capabilities and AI agents and enterprise security is available in the linked articles.
Further Reading
Frequently Asked Questions
Project Glasswing is an Anthropic initiative where the AI model Claude Mythos autonomously searches for security vulnerabilities in systemically important software. Since launching on April 7, 2026, organizations from technology, critical infrastructure, and government have participated. The model operates fully autonomously without human direction and has already found over 23,000 vulnerabilities.
ENISA is the first EU institution outside the US and UK with access to Claude Mythos. This is the result of intensive US-EU negotiations. It marks the first step toward integrating the AI security program into the European regulatory framework and opens the path for NIS2-relevant guidelines.
The new Glasswing sectors (energy, water, healthcare, communications) correspond exactly to NIS2's "essential entities". ENISA will develop guidelines as a Glasswing participant that influence NIS2 requirements. Germany's BSI is in direct contact with Anthropic. Operators should measure their patch velocity and closely follow BSI and ENISA announcements.
Claude Mythos has found over 23,000 security vulnerabilities since April 2026, with more than 10,000 rated high or critical severity. Of 1,726 findings manually verified by Anthropic researchers, 90.6 percent were confirmed accurate, with 1,094 rated high or critical.
The bottleneck is no longer discovery but remediation speed. Fewer than 1 percent of vulnerabilities found by Claude Mythos have been patched. The median time from disclosure to a weaponized exploit dropped from 771 days in 2018 to just hours in 2024. Organizations need to fundamentally accelerate their patch processes.
Yes. OpenAI has given selected partners test access to GPT-5.5-Cyber in parallel. Anthropic itself warns that competitors could develop comparable models within 6 to 12 months. Competition for the standard in AI-powered cybersecurity in Europe has begun.