A restricted AI system appears to have reached one of the most sensitive users in government
The National Security Agency is reportedly using Mythos Preview, Anthropic’s newly announced AI model for cybersecurity work, even though the company has kept the system out of public release. According to the supplied report, Anthropic said earlier this month that Mythos was too capable of offensive cyberattacks to be broadly released, and access was limited to roughly 40 organizations. The NSA appears to be one of the undisclosed recipients.
If accurate, the arrangement captures the complicated phase now unfolding in frontier AI policy. Governments want advanced models for defensive and operational tasks, especially in cybersecurity. At the same time, those same institutions are confronting the risks that come with deploying tools that can also be used for offensive purposes. The reported NSA use of Mythos brings that tension into unusually sharp focus.
What the report says the NSA is doing with Mythos
The article says the NSA is using Mythos primarily to scan environments for exploitable vulnerabilities. That is a narrower and more concrete description than the broad marketing language that often surrounds AI deployments. It suggests a practical use case: pointing a powerful model at digital infrastructure to surface weaknesses before adversaries do.
That matters because vulnerability discovery sits at the boundary between defense and offense. A system that can help defenders identify flaws can, by nature, expose paths an attacker might exploit. Anthropic’s own stance, as described in the report, appears to recognize that dual-use problem. The company announced Mythos as a frontier model built for cybersecurity tasks, but withheld it from public release because of concern over offensive capability.
That framing makes the NSA’s reported access especially notable. Rather than a consumer launch or an enterprise beta, this appears to be a controlled deployment to highly selected organizations. The U.K.’s AI Security Institute has also confirmed access, according to the supplied text. Together, those details point to a pattern in which particularly capable systems may be shared first with state or state-adjacent institutions instead of entering the open commercial market.







