Anthropic loosens Claude's biology safeguards for vetted researchers
BiosecurityAnthropic introduced the Life Sciences Verification Program (LSVP) on 17 September 2026, giving vetted life science professionals access to its Mythos, Opus and Sonnet models under what the company called a refined set of safeguards more permissive for biology-related work. The scheme is designed to unblock tasks such as drug discovery, research biology, clinical development and manufacturing that remain off-limits on Anthropic's generally available Fable models. According to Anthropic, dozens of organizations have already been onboarded through an early-access program, with applications now open to the broader life science community, and outside coverage of the launch reported that initial participants include Xaira Therapeutics, Edison Scientific, and Manifold Bio, with hundreds more expected to enrol in the first week.
Access runs through a vetting process that checks research credentials, security practices and ethical oversight, before organisations receive one of two grant types. A Standard Use grant, Anthropic said, can be extended to entire teams for diverse, daily workloads, and are renewed once a year, covering the bulk of R&D, clinical and manufacturing work. A separate High-risk Use add-on goes further: it applies to a single dual-use research project rather than a whole team, must be renewed every six months, and, in Anthropic's words, removes all safeguards that block life sciences requests. The company gave the example of a researcher characterizing how one specific family of viral vectors is recognized by human immune pathways as the kind of narrowly scoped project the high-risk tier is meant to accommodate. High-risk access to the most capable Mythos model is being developed in coordination with the US government and, at launch, remains restricted to a small number of organisations subject to extra vetting, according to Anthropic, which is working with the U.S. government to expand high-risk Mythos access.
Anthropic has framed the programme around three threat models it considers most dangerous in biology: compromised accounts, insider misuse and autonomous agents acting outside their approved scope. The company argues that in this domain, distinguishing legitimate research from harmful intent is often impossible at the level of a single prompt, since it's often not possible to differentiate between a user doing valid work... and pursuing harm, such as work that could increase a virus's transmissibility. That reasoning underpins the shift away from real-time blocking toward retrospective review: usage is retained for 30 days and checked against the scope an organisation declared when it applied, with anomalies flagged to the organisation's own administrators to investigate rather than halted automatically, as traffic outside an organization's approved scope is flagged for its administrators, who must investigate within timeframes agreed with Anthropic.
Cybersecurity protections are unaffected by the change. Anthropic and independent write-ups of the launch both note that the program creates a formal route for eligible organizations to use Anthropic's most restricted biology-oriented model capabilities while retaining safeguards in other sensitive areas, including cybersecurity. The LSVP sits alongside a parallel Cyber Verification Program for vetted cyberdefenders, and Anthropic has said it plans to extend life sciences access beyond institutional teams to individual Pro and Max subscribers over time.