US cyber agency is using Anthropic’s Mythos to audit government code, sources say

This article was published on July 7, 2026 A federal defender is reportedly pointing a private, offensive-grade AI model at the government’s own software, though almost nothing about the work is on the record. The US Cybersecurity and Infrastructure Security Agency is using Anthropic’s AI model Mythos to hunt for bugs in government software, according to three people familiar with the matter who spoke to Reuters. The arrangement, first reported on 6 July, is the latest sign that Washington’s appetite for the startup’s tools has outlasted a bruising standoff with the White House. Mythos is the same model that reportedly found flaws in classified US systems during an earlier government test, and its path into federal hands has been anything but smooth. It lands at CISA even as Anthropic and the administration keep sparring over who is allowed to run it. According to the sources, CISA is pointing Mythos at government code repositories to flag vulnerabilities that could let foreign spies or cybercriminals in. The scanning is being carried out by the agency’s Attack Surface Evaluation team, one person said, a unit that runs digital security assessments and hacking exercises across gover