
Today we’re launching Claude Fable 5: a Mythos-class1 model that we’ve made safe for general use.
今天,我们正式发布 Claude Fable 5:一款经过安全处理、面向通用场景开放的 Mythos 级(Mythos-class)1模型。
Fable 5’s capabilities exceed those of any model we’ve ever made generally available. It is state-of-the-art on nearly all tested benchmarks of AI capability, showing exceptional performance in software engineering, knowledge work, vision, scientific research, and many other areas. The longer and more complex the task, the larger Fable 5’s lead over our other models.
Fable 5 的能力超越了我们以往面向公众开放的任何一款模型。在几乎所有受测的 AI 能力基准上,它都达到了业界最高水平,在软件工程、知识型工作、视觉、科学研究等众多领域展现出卓越表现。任务越长、越复杂,Fable 5 相对于我们其他模型的领先优势就越大。
Releasing a model this capable comes with risks. Without safeguards, Fable 5’s capabilities in areas like cybersecurity could be misused to cause serious damage. We’ve therefore launched the model with safeguards that mean queries on some topics will instead receive a response from our next-most-capable model, Claude Opus 4.8. To release the model both safely and quickly, we’ve tuned these safeguards conservatively—they’ll sometimes catch harmless requests, though they trigger, on average, in less than 5% of sessions. With more capable models arriving in the coming months, we’re working to improve our safeguards and reduce false positives as quickly as we can.
发布一款如此强大的模型也伴随着风险。若没有防护措施,Fable 5 在网络安全等领域的能力可能被滥用,造成严重危害。因此,我们在发布时为其配备了防护机制:涉及某些主题的请求,将转由我们能力次强的模型 Claude Opus 4.8 来作答。为了既安全又迅速地发布这款模型,我们把这些防护措施调得偏保守——它们有时会误拦无害的请求,不过平均而言,触发率低于 5% 的会话。随着未来几个月更强大的模型陆续问世,我们正努力改进防护措施,并尽快降低误报率。
For a small group of cyberdefenders and infrastructure providers, we’re also launching Claude Mythos 5. It’s the same underlying model as Fable 5, but with the safeguards lifted in some areas.2 Mythos 5 will initially be deployed through Project Glasswing, in collaboration with the US government, as an upgrade to Claude Mythos Preview. It has the strongest cybersecurity capabilities of any model in the world. Soon, we intend to expand access to Mythos 5 through a broader trusted access program.
面向一小批网络防御者和基础设施提供方,我们同时发布 Claude Mythos 5。它与 Fable 5 是同一个底层模型,只是在某些领域解除了防护限制。2Mythos 5 最初将通过我们与美国政府合作的”玻璃翼计划”(Project Glasswing)部署,作为 Claude Mythos Preview 的升级版。它拥有全球任何模型中最强的网络安全能力。不久之后,我们计划通过一个范围更广的”可信访问计划”(trusted access program)来扩大 Mythos 5 的开放范围。
The capabilities of models like Fable 5 and Mythos 5 have the potential to do profound good for the world. We’ve seen the beginnings of this in Project Glasswing, where the models have helped cyber defenders secure critically important software. We’ve also seen it in life sciences research, where the models are positing novel hypotheses and speeding up the development of new therapeutics.
像 Fable 5 和 Mythos 5 这样的模型,其能力有潜力为世界带来深远的福祉。我们已经在”玻璃翼计划”中看到了这种苗头——模型帮助网络防御者守护了至关重要的软件。我们也在生命科学研究中看到了这一点——模型正在提出新颖的假设,并加快新疗法的研发进程。
Fable 5 and Mythos 5 are being offered at $10 per million input tokens and $50 per million output tokens—less than half the price of Claude Mythos Preview. Today’s joint launch is another step towards our goal of bringing advanced AI capabilities to as many users as possible, as quickly and as safely as we can.
Fable 5 与 Mythos 5 的定价为:每百万输入 token 10 美元、每百万输出 token 50 美元——还不到 Claude Mythos Preview 价格的一半。今天这次联合发布,是我们朝着既定目标又迈进了一步:尽可能快、尽可能安全地,把先进的 AI 能力带给尽可能多的用户。
Evaluating Claude Fable 5 and Claude Mythos 5
评测 Claude Fable 5 与 Claude Mythos 5
The table below compares the capabilities of Fable 5 and Mythos 5 to other leading models.
下表将 Fable 5 与 Mythos 5 的能力同其他领先模型进行了对比。

Benchmark table comparing Claude Mythos 5 / Fable 5 to Mythos Preview, Opus 4.8, GPT 5.5, and Gemini 3.1 Pro. Starred (*) benchmarks show a larger difference due to our blocking safeguards.
▲ Claude Mythos 5 / Fable 5 与 Claude Mythos Preview、Opus 4.8、GPT 5.5、Gemini 3.1 Pro 的能力对比。带星号(*)的基准,因我们针对网络安全与生物/化学问题的拦截式防护而存在较大差异;这些基准上 Fable 5 因回退而更接近 Opus 4.8。详见系统卡。
Fable 5 and Mythos 5 can work autonomously for longer than any previous Claude models. Below we discuss how these skills apply to software engineering, and cover the model’s improved capabilities in knowledge work, vision, memory, and life sciences research.
Fable 5 与 Mythos 5 能够自主工作的时长超过以往任何一代 Claude 模型。下面我们将讨论这些能力如何应用于软件工程,并介绍模型在知识型工作、视觉、记忆以及生命科学研究方面的进步。
Software engineering. During early testing, Stripe reported that Fable 5 compressed months of engineering into days. In a 50-million-line Ruby codebase, the model performed a codebase-wide migration in a day that would otherwise have taken a whole team over two months by hand. Fable 5 is also more token-efficient than past Claude models: on Cognition’s FrontierCode evaluation, which tests whether models can pass difficult coding tasks while meeting the standards of high-quality production codebases, Fable 5 scores highest among frontier models, even at medium effort.
软件工程。在早期测试中,Stripe 反馈说 Fable 5 把数月的工程量压缩到了几天。在一个 5000 万行的 Ruby 代码库中,模型用一天时间完成了一次全代码库的迁移——而这项工作若由整个团队手工完成,本需两个多月。Fable 5 在 token 使用上也比过去的 Claude 模型更高效:在 Cognition 的 FrontierCode 评测(该评测考查模型能否在满足高质量生产级代码库标准的前提下通过高难度编程任务)中,Fable 5 在各前沿模型里得分最高——哪怕只在”中等投入”(medium effort)档位下运行。
Knowledge work. Fable 5 shows strong performance on complex analytical tasks. On Hebbia’s Finance Benchmark for senior-level reasoning, Fable 5 has the highest score of any model, with substantial gains in document-based reasoning, chart and table interpretation, and problem solving. IMC noted that Fable 5 aced their trading-analysis evaluations nearly across the board, including factual lookup, conceptual reasoning, root-cause analysis, and expected-value analysis.
知识型工作。Fable 5 在复杂分析任务上表现强劲。在 Hebbia 面向资深级别推理的金融基准(Finance Benchmark)中,Fable 5 取得了所有模型中的最高分,在基于文档的推理、图表解读以及问题求解方面均有大幅提升。IMC 指出,Fable 5 几乎在他们全部的交易分析评测中都拿到了满分级表现,涵盖事实查找、概念推理、根因分析与期望值分析。
Vision. Fable 5 is the new state-of-the-art model for tasks involving vision. It can extract precise numbers from detailed scientific figures and can perform complex vision-based tasks like rebuilding a web app’s source code from screenshots alone. It also needs less scaffolding: for example, previous Claude models struggled to play Pokémon FireRed even with harnesses that gave them additional helpful tools, but Fable 5 beat FireRed with a minimal, vision-only harness.
视觉。在涉及视觉的任务上,Fable 5 是新一代业界最强模型。它能从精细的科学图表中提取出准确的数值,也能完成诸如仅凭截图还原 Web 应用源代码这样的复杂视觉任务。它所需的”脚手架”(scaffolding)也更少:举例来说,以往的 Claude 模型即便配上能提供额外辅助工具的运行框架,也很难玩转《宝可梦:火红》,而 Fable 5 仅靠一个极简的、纯视觉的运行框架就通关了《火红》。
Memory and long-context. Fable 5 stays focused across millions of tokens in long-running tasks and improves its outputs using its own notes. When we had the model play the deck-building game Slay the Spire, giving it access to persistent file-based memory improved its performance three times more than for Opus 4.8; Fable also reached the game’s final act three times more often.
记忆与长上下文。在长时间运行的任务中,Fable 5 能在数百万 token 的跨度上保持专注,并借助自己记下的笔记来改进输出。当我们让模型去玩卡牌构筑类游戏《杀戮尖塔》(Slay the Spire)时,赋予它基于文件的持久化记忆,对其表现的提升幅度是 Opus 4.8 的三倍;Fable 进入游戏最终幕(final act)的频率也是后者的三倍。
Drug design. Using Mythos 5, our internal protein design experts accelerated aspects of the drug design process by around ten times. In one example, they found that Mythos 5, with protein design and bioinformatics tools but no human assistance, matches or beats skilled human operators. In doing so, the model executes all of the tasks that are normally completed by a scientist: choosing binding sites, selecting and running protein design tools, and recovering from failures along the way. Nine of the 14 protein targets from this study (shown below) yielded strong candidates for drug design that we’re currently investigating.
药物设计。借助 Mythos 5,我们内部的蛋白质设计专家把药物设计流程中的部分环节加速了约十倍。在一个案例中,他们发现:Mythos 5 在配备蛋白质设计与生物信息学工具、且无任何人类协助的情况下,表现可与熟练的人类操作者持平甚至更优。在此过程中,模型完成了通常由科学家来做的全部工作:选择结合位点、挑选并运行蛋白质设计工具,以及在途中从失败中恢复。在这项研究的 14 个蛋白质靶点(见下图)中,有 9 个产出了用于药物设计的有力候选物,我们目前正在对其展开进一步研究。

Protein complexes designed by Mythos 5. Targets include immune checkpoints, growth-factor and receptor signaling, neurodegeneration, muscle disease, and harder structural targets.
▲ 由 Mythos 5 设计的蛋白质复合物。靶点涵盖免疫检查点、生长因子与受体信号、神经退行性疾病、肌肉疾病,以及更具挑战的结构性靶点。
Novel hypotheses in molecular biology. Mythos 5 is our first model to consistently produce novel, compelling scientific hypotheses. In blinded head-to-head comparisons against Opus-class models, our scientists preferred Mythos’s molecular biology hypotheses ~80% of the time, and have advanced several to experimental evaluation. In the meantime, one Mythos hypothesis—a novel mechanism for an E. coli protein—was corroborated in a study from a lab independently working on the same problem.
分子生物学中的新颖假设。Mythos 5 是我们第一款能够稳定提出新颖且有说服力的科学假设的模型。在与 Opus 级模型进行的盲法正面对比中,我们的科学家约有 80% 的情况更青睐 Mythos 提出的分子生物学假设,并已将其中数项推进到了实验验证阶段。与此同时,Mythos 提出的一项假设——关于某种大肠杆菌(E. coli)蛋白的新颖机制——在一个独立研究同一问题的实验室所做的研究中得到了印证。
Novel research in genomics. Mythos 5 conducted novel genomics research in over a week of largely autonomous work. It assembled single-cell data for millions of cells spanning 138 animal species and designed and trained a custom machine learning model to identify cells performing the same role in even distantly related organisms. With only high-level human input, Mythos 5’s trained model outperformed a recent model published in the journal Science—despite being 100 times smaller. We intend to publish these results in the coming months.
基因组学中的原创研究。Mythos 5 在长达一周多、基本自主的工作中完成了一项原创的基因组学研究。它整合了横跨 138 个动物物种、数以百万计细胞的单细胞数据,并设计、训练了一个定制的机器学习模型,用以识别在亲缘关系即便很远的生物体中扮演相同角色的细胞。在仅有高层级人类输入的情况下,Mythos 5 训练出的模型表现胜过了近期发表在《科学》(Science)期刊上的一个模型——尽管其体量只有后者的百分之一。我们计划在未来几个月内发表这些成果。
Alignment. In our automated alignment assessment we found that Mythos 5’s level of misaligned behavior (including misaligned actions taken by the model such as deception, and cooperation with misuse of the model by a user) was low, and similar to that of Opus 4.8. Given they are the same underlying model, Fable 5’s level of alignment will be similar. The assessment is described in full, along with a detailed suite of other safety and capabilities tests, in the model’s system card.
对齐(Alignment)。在我们的自动化对齐评估中,我们发现 Mythos 5 的失准行为(misaligned behavior,包括模型自身采取的失准行动,如欺骗,以及配合用户对模型的滥用)水平较低,与 Opus 4.8 相当。鉴于二者是同一个底层模型,Fable 5 的对齐水平也将与之相近。这项评估,连同一整套其他安全与能力测试的详细内容,已在该模型的系统卡(system card)中完整记述。

Overall level of misaligned behaviors from our automated alignment assessment. See section 6.2.3.1 of the system card for more.
▲ 自动化对齐评估中各模型的总体失准行为(misaligned behaviors)水平。详见系统卡第 6.2.3.1 节。
Early feedback for Claude Fable 5
Claude Fable 5 的早期反馈
Customers with early access ran their own tests on Fable 5. Below, in their words, is a selection of what they’re seeing:
获得早期访问权限的客户对 Fable 5 进行了各自的测试。以下精选了他们的原话反馈:
“Claude Fable 5 is the state of the art model on CursorBench. It’s opened up a class of long-horizon problems that were out of reach for earlier models.”
“Claude Fable 5 在 CursorBench 上是最先进的模型。它打开了一类长周期问题的大门,而这些问题是早期模型力所不及的。”
—— Michael Truell, CEO and Co-founder · CEO 兼联合创始人
“Claude Fable 5 is a real step forward for the developers GitHub serves. In our early testing, it took on complex, long-horizon coding tasks with a level of autonomy and reliability that exceeded previous benchmarks. But what excites us most is the direction it points: a future where developers can hand increasingly ambitious work to agents and trust the results across the software lifecycle.”
“对 GitHub 所服务的开发者而言,Claude Fable 5 是一次实实在在的飞跃。在我们的早期测试中,它以超越以往基准的自主性和可靠性,承担起了复杂的、长周期的编程任务。但最让我们兴奋的,是它所指向的方向:一个开发者能够把愈发宏大的工作交托给智能体、并在整个软件生命周期中信任其成果的未来。”
—— Mario Rodriguez, Chief Product Officer · 首席产品官
“These are the strongest results of any Claude model we’ve had the opportunity to test. Claude Fable 5 is a clear step forward on agentic coding and prototyping.”
“这是我们有机会测试过的所有 Claude 模型中最强的成绩。Claude Fable 5 在智能体编程与原型开发上是一次明显的进步。”
—— Matt Colyer, Director of Product, Developers · 开发者产品总监
“Claude Fable 5’s reasoning is a clear step beyond Opus 4.8. It works at senior research scientist grade — picking directions, allocating resources, killing its incorrect beliefs, and producing novel first-principles outputs.”
“Claude Fable 5 的推理能力明显超越了 Opus 4.8。它的工作水准达到了资深研究科学家的级别——选定方向、分配资源、推翻自己错误的判断,并产出基于第一性原理的新颖结论。”
—— Sean Ward, CEO and Co-founder · CEO 兼联合创始人
“Claude Fable 5 understands what builders mean, not just what they type. Apps that took a hundred prompts a year ago, it now one-shots. When a customer really hits a wall, it’s the model we reach for to get them past it quickly, so they can finish what they set out to build.”
“Claude Fable 5 理解的是构建者的意图,而不只是他们敲下的字。一年前要上百次提示才能做出的应用,它如今一次就能搞定。当客户真正卡住时,它就是我们会拿出来、帮他们快速突破瓶颈的那款模型,好让他们完成最初想做的东西。”
—— Fabian Hedin, CTO & Co-founder · CTO 兼联合创始人
“Claude Fable 5 feels materially different. In blind review, our lawyers found its redlines matched or beat our current model every time.”
“Claude Fable 5 给人的感觉有本质的不同。在盲审中,我们的律师发现它给出的修订意见每一次都能与我们当前所用的模型持平甚至更优。”
—— Aveek Duttagupta, Member of Technical Staff · 技术成员
“At the highest effort, Claude Fable 5 reflects on and validates its own work. For us, that’s what makes highly autonomous operations possible — the extra thinking pays for itself.”
“在最高投入档位下,Claude Fable 5 会反思并验证自己的工作。对我们来说,正是这一点让高度自主的运营成为可能——这些额外的思考是物有所值的。”
—— Yusuke Kaji, GM, AI for Business · 企业级 AI 业务总经理
“Claude Fable 5 delivers more capable engineering in fewer turns than prior models — handling the complex multi-agent workflows our employees run daily in Claude Code.”
“相比以往的模型,Claude Fable 5 用更少的回合就交付了更强的工程能力——它能驾驭我们员工每天在 Claude Code 中运行的复杂多智能体工作流。”
—— Luke Anderson, CTO
“Claude Fable 5 is the highest-scoring model on FrontierBench, Cognition’s frontier coding eval. It excels at long-horizon reasoning and generalizes to unfamiliar tools out of the box.”
“在 Cognition 的前沿编程评测 FrontierBench 上,Claude Fable 5 是得分最高的模型。它擅长长周期推理,并且开箱即用地就能泛化到陌生的工具上。”
—— Scott Wu, CEO
“Claude Fable 5 is the strongest finance-first model we’ve tested, both on general finance and reasoning. It’s a notable step up.”
“Claude Fable 5 是我们测试过的最强的金融优先(finance-first)模型,无论是在通用金融还是推理方面都是如此。这是一次显著的提升。”
—— Damian Miraglia, Principal Engineer, Applied AI · 应用 AI 首席工程师
“Claude Fable 5 is the first to break 90% on our core analytics benchmark of complex, long-running analytical tasks — a 10-point jump over Opus. On the hardest questions, it shows strong judgment and attention to nuance.”
“在我们针对复杂、长时运行分析任务的核心分析基准上,Claude Fable 5 是第一个突破 90% 的模型——比 Opus 高出 10 个百分点。在最难的问题上,它展现出了强大的判断力和对细微之处的敏感。”
—— Izzy Miller, AI Research Lead · AI 研究负责人
“Claude Fable 5 is the strongest model we’ve tested on frontier physics research while using a third of the reasoning tokens. In 36 hours it got nearly to where GPT-5.5 landed after four days.”
“在前沿物理研究上,Claude Fable 5 是我们测试过的最强模型,而它所用的推理 token 仅为三分之一。36 小时内,它就几乎达到了 GPT-5.5 用四天才到达的水平。”
—— Matthew Pines, CEO
“On ViBench, our end-to-end vibe-coding benchmark, Claude Fable 5 is the highest-performing model we’ve tested — nearly saturating our base use cases and building apps in less time with fewer tokens.”
“在我们端到端的’氛围编程’(vibe-coding)基准 ViBench 上,Claude Fable 5 是我们测试过表现最好的模型——它几乎让我们的基础用例达到饱和,并以更短的时间、更少的 token 构建出应用。”
—— Michele Catasta, President & Head of AI · 总裁兼 AI 负责人
“Claude Fable 5 beats Opus 4.8 on our everyday spreadsheet suite at every effort level — and it does it with fewer turns, finishing runs 25–30% faster.”
“在我们日常的电子表格测试套件上,Claude Fable 5 在每一个投入档位都胜过 Opus 4.8——而且它用更少的回合做到这一点,整体运行速度快了 25%–30%。”
—— Peter Wang, Chief Science Officer · 首席科学官
Claude Fable 5’s new safeguards
Claude Fable 5 的新防护措施
Mythos-class models have reached a threshold where they present significant risks. In April we began Project Glasswing, releasing the first Mythos-class model (Claude Mythos Preview) to only a limited group of cyber defenders and critical software infrastructure providers. When we did so, we stated that we hoped to eventually release Mythos-level capabilities to all our users, so long as we had developed new safeguards that were strong enough to reliably prevent misuse.
Mythos 级模型的能力已经达到了一个会带来重大风险的临界点。今年 4 月,我们启动了”玻璃翼计划”,将首款 Mythos 级模型(Claude Mythos Preview)仅向一小批网络防御者和关键软件基础设施提供方开放。当时我们就表示,希望最终能把 Mythos 级别的能力开放给所有用户——前提是我们已经开发出足够强、能够可靠防止滥用的新防护措施。
Over the past few months we have been improving these safeguards, and they are now robust enough for a general release. Because we have prioritized safety, we’ve deliberately tuned the safeguards to be cautious, and they are still stricter than would be ideal—for example, sometimes benign requests will trigger our classifiers. We recognize that this will be frustrating to some users, and our aim is to reduce false positives as we update and refine the safeguards after launch.
过去几个月里,我们一直在改进这些防护措施,如今它们已经足够稳健,可以支撑面向公众的发布。由于我们把安全放在首位,便有意把防护措施调得偏谨慎,它们目前仍比理想状态更严格——比如,有时无害的请求也会触发我们的分类器。我们清楚这会让部分用户感到困扰,我们的目标是在发布后不断更新和打磨防护措施,逐步降低误报率。
Below we discuss each of Fable 5’s new safeguards in turn. Our wider suite of safeguards is discussed and evaluated in the model’s system card and our most recent risk report.
下面我们逐一介绍 Fable 5 的各项新防护措施。我们更完整的防护体系,已在该模型的系统卡以及我们最新的风险报告中进行了讨论与评估。
Safety classifiers
安全分类器
The frontier cybersecurity and research biology capabilities of Mythos-class models mean that they pose a substantial risk of uplift to malicious actors. That is, these models could provide information or advice that assists those actors in causing serious harm that they couldn’t have received from other sources (for example, from internet search engines). Furthermore, a great deal of advanced usage of AI models is dual use: the same queries that are beneficial in the hands of cybersecurity professionals and biology researchers could be dangerous if available to malicious actors.
Mythos 级模型在前沿网络安全和研究型生物学上的能力,意味着它们存在为恶意行为者提供显著”能力跃升”(uplift)的重大风险。也就是说,这些模型可能提供某些信息或建议,帮助这些行为者造成他们本无法从其他渠道(例如互联网搜索引擎)获得的严重危害。此外,对 AI 模型的许多高级用法都是”军民两用”(dual use)的:同样的查询,在网络安全专家和生物学研究者手中是有益的,可一旦落到恶意行为者手里就可能变得危险。
We therefore need strong safeguards to prevent misuse, and their coverage needs to be broad. The safeguards themselves have to stand up to sustained and sophisticated attempts to bypass them (also known as “jailbreaking” the system). The uplift from Mythos-level capabilities is valuable to many adversaries—for instance, those who could financially gain from cyberattacks—and we therefore expect them to be motivated to try to circumvent our safety measures.
因此,我们需要强有力的防护措施来防止滥用,而且其覆盖面必须足够广。防护措施本身必须经得起持续而精巧的绕过尝试(也就是所谓的对系统”越狱”,jailbreaking)。Mythos 级别能力所带来的跃升,对许多对手都极具价值——比如那些能从网络攻击中获取经济利益的人——因此我们预计他们会有强烈动机去设法规避我们的安全措施。
Fable 5 comes with a new set of classifiers: separate AI systems that detect potential misuse, including jailbreak attempts, and prevent the main model (in this case Fable 5) from responding. We’ve been running classifiers on our models for some time, and Fable 5’s classifiers are an extension of this previous work with extra coverage.
Fable 5 配备了一套全新的分类器:它们是独立的 AI 系统,用于检测潜在的滥用(包括越狱尝试),并阻止主模型(此处即 Fable 5)作答。我们在模型上运行分类器已有一段时间,Fable 5 的分类器正是在这一既有工作基础上的延伸,并扩大了覆盖范围。
When Fable’s classifiers detect a request related to cybersecurity, biology and chemistry, or distillation, the response is automatically handled by Claude Opus 4.8 instead. Users will be informed whenever this occurs. Opus 4.8 is a highly capable model in its own right: a response that falls back to Opus is a far better experience than an outright refusal from Fable. Our early data shows that more than 95% of Fable sessions involve no fallback at all—for those sessions, Fable 5’s performance is effectively the same as that of Mythos 5.
当 Fable 的分类器检测到与网络安全、生物与化学,或模型蒸馏(distillation)相关的请求时,应答会自动改由 Claude Opus 4.8 来处理。每当发生这种情况,用户都会被告知。Opus 4.8 本身就是一款能力很强的模型:相比 Fable 直接拒答,回退(fall back)到 Opus 的体验要好得多。我们的早期数据显示,超过 95% 的 Fable 会话根本不会触发任何回退——对这些会话而言,Fable 5 的表现实际上与 Mythos 5 别无二致。
The following are the areas covered by the classifiers:
以下是这些分类器所覆盖的领域:
-
1. Cybersecurity. Mythos-class models excel at discovering and exploiting software vulnerabilities. They can thus make cyberattacks substantially easier and cheaper to commit. Mythos-class models also show strong skills in agentic hacking. This involves performing multiple different parts of a cyberattack in addition to finding exploits—reconnaissance, discovery, lateral movement, and more. To prevent these agentic hacking skills providing uplift in cyberattacks, we designed our cybersecurity classifiers to cover both exploitation and offensive cyber tasks in a broader sense. As shown in the graph below, our classifiers prevent Fable from making any progress on these tasks.
1. 网络安全。Mythos 级模型在发现和利用软件漏洞方面极为出色,因而能让网络攻击的实施变得大为容易、成本大为降低。Mythos 级模型在”智能体式黑客攻击”(agentic hacking)上也展现出很强的能力。这不仅包括寻找可利用的漏洞,还包括执行一次网络攻击中的多个不同环节——侦察、探测、横向移动等等。为了防止这些智能体式黑客能力为网络攻击提供跃升,我们把网络安全分类器设计为覆盖更广义的”漏洞利用”和”攻击性网络任务”两类。如下图所示,我们的分类器能阻止 Fable 在这些任务上取得任何进展。
-
2. Biology and chemistry. We have long used our classifiers to block our models from responding on a narrow selection of bioweapons-related queries. But we are no longer certain that blocking this narrow selection is enough. This is for two reasons: first, we have reason for concern about well-resourced malicious actors attempting to gain uplift from our models for highly risky biological research. Second, models now have a greater ability to accomplish real-world scientific tasks.
2. 生物与化学。长期以来,我们一直用分类器来阻止模型回应一小类与生物武器相关的查询。但我们如今已不再确信,仅仅拦下这一小类就足够了。原因有二:其一,我们有理由担忧资源雄厚的恶意行为者会试图从我们的模型中获取跃升,用于高风险的生物学研究;其二,模型如今完成真实世界科学任务的能力已大为增强。
-
3. Distillation. We’ve previously identified large-scale attempts to extract (“distill”) Claude’s capabilities to train competing models in authoritarian countries. Distillation of Fable 5’s abilities could indirectly lead to the proliferation of near-frontier AI capabilities—and these could be released without the appropriate safeguards. Requests that are flagged by our classifiers as being part of such distillation attempts will fall back to Opus 4.8.
3. 蒸馏。我们此前已识别出一些大规模的图谋:试图提取(”蒸馏”,distill)Claude 的能力,以在威权国家训练竞争性模型。对 Fable 5 能力的蒸馏,可能会间接导致接近前沿水平的 AI 能力扩散——而这些能力或会在缺乏适当防护措施的情况下被释放出来。凡被我们的分类器标记为属于此类蒸馏图谋的请求,都将回退到 Opus 4.8。

Results of running offensive cyber evaluations, with Fable 5 in a mode that blocks responses rather than falling back to Opus 4.8. Evaluations did not involve attempts to evade safeguards.
▲ 网络攻击性评估(offensive cyber evaluations)结果:Fable 5 运行于”拦截应答、而非回退到 Opus 4.8″的模式下;评估未涉及绕过防护的尝试。
We extensively red-teamed our classifiers to test their robustness against jailbreaks. As well as internal testing, we ran an external bug bounty that produced no universal jailbreaks in over 1,000 hours of testing. External red-teaming organizations we engaged also failed to find any universal jailbreaks on long-form agentic tasks so far—although the UK AISI has made progress towards one within a brief initial testing window.4 It is likely impossible to completely prevent universal jailbreaks, but our goal is to make any remaining jailbreaks sufficiently slow and costly that we can detect and prevent them before they are used at scale.
我们对分类器进行了大量的红队测试,以检验它们抵御越狱的稳健性。除内部测试外,我们还开展了一项外部漏洞赏金活动,在超过 1000 小时的测试中没有产生任何”通用越狱”(universal jailbreak)。我们所聘请的外部红队机构,迄今也未能在长篇智能体任务上找到任何通用越狱——尽管英国 AI 安全研究所(UK AISI)在一个短暂的初步测试窗口内,已朝着发现一例通用越狱取得了一些进展。4要完全杜绝通用越狱很可能是不可能的,但我们的目标是让任何残留的越狱都足够缓慢、足够高成本,以便我们能在它们被大规模利用之前及时发现并加以阻止。

Results of an internal evaluation in which an automated red-teamer tries to use the model to complete a short offensive-cybersecurity task across 400 turns, restarting and rewinding when blocked. On more complex and realistic tasks we have not yet seen successful jailbreaks on our production system. (Opus 4.6 does not have blocking cyber safeguards.)
▲ 一项内部评估的结果:自动化红队在 400 个回合中反复尝试(受阻即重启、回退),试图让模型完成一个简短的攻击性网络安全任务。这些任务大多简单、并不代表真实网络用法。在更复杂、更贴近现实的任务上,我们尚未在生产系统中看到成功的越狱。注:Opus 4.6 并不带拦截式网络防护。
One of our external partners found that Fable 5’s safeguards against harmful cyber queries were the most robust of any model tested (including Opus 4.8 and Opus 4.7). Fable 5 complied with zero harmful single-turn requests relating to planning a cyberattack, exploit development, or defense evasion. This held whether or not one of the requests used any of 30 different public jailbreak techniques.
我们的一家外部合作伙伴发现,Fable 5 针对有害网络查询的防护措施,是所有受测模型(包括 Opus 4.8 和 Opus 4.7)中最稳健的。对于涉及策划网络攻击、漏洞利用开发或防御规避的有害单轮请求,Fable 5 的服从率为零。无论请求是否用上了 30 种不同的公开越狱技术中的任何一种,这一结论都成立。
On biology and chemistry: for example, we tested Mythos 5’s ability to complete a challenging step in designing adeno-associated viruses (AAVs). AAVs are a component for delivering gene therapies, but the same capability, in the wrong hands, could enable the design of dangerous viruses. In this task, various AI models were evaluated on their ability to predict how a genetic modification would impact the assembly of the virus’s outer shell (among a set of therapeutically-relevant unpublished candidates developed by Dyno Therapeutics). We did not explicitly train our models to perform this task—and yet Mythos-class models outperformed sophisticated models dedicated to protein tasks (known as “protein language models”) using their biological reasoning alone. This demonstrates a promising ability to complete simple but important tasks in gene therapy research and development—but also highlights the risk posed by such dual-use capabilities.
关于生物与化学:举例来说,我们测试了 Mythos 5 完成腺相关病毒(AAV)设计中一个高难度步骤的能力。AAV 是递送基因疗法的一种载体组件,但同样的能力一旦落入不法之手,也可能被用于设计危险的病毒。在这项任务中,多款 AI 模型被评估其预测能力:一项基因改造会如何影响病毒外壳的组装(测试对象是 Dyno Therapeutics 开发的一组与治疗相关、尚未发表的候选物)。我们并没有专门训练模型来完成这项任务——然而 Mythos 级模型仅凭其生物学推理,表现就胜过了那些专门用于蛋白质任务的精密模型(即所谓的”蛋白质语言模型”)。这既展现出其在基因疗法研发中完成简单但重要任务的可观潜力——也凸显了此类两用能力所带来的风险。

Results of an evaluation in which our models predicted the unpublished experimental properties of the viral shell of a simple virus. AAV = adeno-associated virus.
▲ 一项评估的结果:模型预测一种简单病毒外壳的未公开实验性质。在此情境下,病毒外壳的组装是最易预测的病毒性状,但在设计更复杂的特征时正确预测它仍然重要。AAV=腺相关病毒。
Our priority was to safely release Fable as soon as we could, even at the cost of overly broad safeguards. Therefore, for the time being we have arranged for Fable to fall back to Opus 4.8 on most requests related to biology and chemistry. As with all of our classifiers, we hope to narrow these safeguards as soon as possible: as can be seen from the evidence above, there is great potential for positive applications of Fable for science, and we do not want false positives from our classifiers to get in the way. In the coming weeks, some biomedical researchers and companies will be able to join our trusted access program for biology capabilities in Mythos 5 (discussed below).
我们的首要任务,是尽可能快地安全发布 Fable,哪怕代价是防护措施过于宽泛。因此,目前我们已安排 Fable 在大多数与生物和化学相关的请求上回退到 Opus 4.8。与我们所有的分类器一样,我们希望尽快收窄这些防护措施:正如上述证据所示,Fable 在科学领域有着巨大的正面应用潜力,我们不希望分类器的误报成为绊脚石。未来几周内,部分生物医学研究者和企业将能够加入我们针对 Mythos 5 生物能力的可信访问计划(详见下文)。
A new data retention policy
一项新的数据保留政策
Finally, we’re making a change to the way we handle business customer data for Fable 5, Mythos 5, and future models with similar or higher capability levels. We will require 30-day retention for all traffic on Mythos-class models, on both first- and third-party surfaces. We won’t use this data to train new Claude models, or for any non-safety-related purpose, and we’ve instituted new privacy protections including logging all human access to the data and ensuring its deletion after 30 days in almost all cases (see this post for further details). The data will help us defend against complex and novel attacks (including new jailbreaks and attacks that operate across many requests) as well as help us identify and reduce false positives.
最后,针对 Fable 5、Mythos 5 以及未来具有相近或更高能力水平的模型,我们将调整对企业客户数据的处理方式。我们将要求对 Mythos 级模型上的所有流量保留 30 天,无论是第一方还是第三方界面。我们不会用这些数据来训练新的 Claude 模型,也不会用于任何与安全无关的目的;同时我们已经设立了新的隐私保护措施,包括记录所有对这些数据的人工访问,并确保在几乎所有情况下数据都会在 30 天后删除(更多细节见相关文章)。这些数据将帮助我们抵御复杂而新颖的攻击(包括新的越狱手法,以及横跨多次请求展开的攻击),同时也有助于我们识别并减少误报。
Claude Mythos 5 and the trusted access program
Claude Mythos 5 与可信访问计划
Beginning today, all users who currently have access to Claude Mythos Preview (for example, our cybersecurity partners in Project Glasswing) will be able to upgrade to Claude Mythos 5—the same model as Claude Fable 5 but with cyber safeguards lifted. Users will find Mythos 5 comparable to, or somewhat stronger than, Mythos Preview in most cases, while costing substantially less.
从今天起,所有当前已能访问 Claude Mythos Preview 的用户(例如”玻璃翼计划”中的网络安全合作伙伴),都将能够升级到 Claude Mythos 5——它与 Claude Fable 5 是同一款模型,只是解除了网络方面的防护限制。在大多数情况下,用户会发现 Mythos 5 与 Mythos Preview 相当、或略强于后者,而成本却大幅降低。
In consultation with the US government, we plan to steadily expand access to Claude Mythos 5, continuing our periodic addition of new partners, as well as pursuing a trusted access program that allows cybersecurity organizations to apply in a more systematic manner.
在与美国政府协商的基础上,我们计划稳步扩大 Claude Mythos 5 的开放范围:一方面继续定期增加新的合作伙伴,另一方面推进一项可信访问计划,让网络安全机构能够以更系统化的方式提出申请。
Our plans also include opening a trusted access program for biology, to help accelerate biomedical research and discover new therapies with Mythos-class capabilities. This program will provide access to Fable 5 with the biology and chemistry safeguards removed (but the cyber safeguards still in place). It will enroll a small number of researchers from a variety of life science organizations spanning fundamental and translational research; we’re planning to expand access to this program while simultaneously making our safeguards better.
我们的计划还包括开放一项面向生物学的可信访问计划,借助 Mythos 级能力来加速生物医学研究、发现新的疗法。该计划将提供解除了生物与化学防护限制(但仍保留网络防护)的 Fable 5 访问权限。它将吸纳来自各类生命科学机构、横跨基础研究与转化研究的少量研究者;我们计划一边扩大该计划的开放范围,一边同步把我们的防护措施做得更好。
Availability
可用性
Claude Fable 5 is available everywhere today. Claude Mythos 5 is restricted to Glasswing partners (with cyber safeguards lifted) and soon to select biology researchers (with biology and chemistry safeguards lifted) only, until our broader trusted access program is available.
Claude Fable 5 自今日起在所有渠道开放使用。Claude Mythos 5 则仅限于”玻璃翼计划”的合作伙伴(解除网络防护)以及即将加入的少数生物学研究者(解除生物与化学防护),直至我们更广泛的可信访问计划开放为止。
Pricing for both models is $10 per million input tokens and $50 per million output tokens. Developers can use claude-fable-5 via the Claude API.
两款模型的定价均为:每百万输入 token 10 美元、每百万输出 token 50 美元。开发者可通过 Claude API 使用 claude-fable-5。
We expect demand for Fable 5 to be very high, and difficult to predict. On the Claude API and consumption-based Enterprise plans, Fable 5 is fully available from today. For subscription plans, we’d rather give access sooner than later, so we’re rolling out more conservatively, in stages:
我们预计 Fable 5 的需求会非常高,且难以预测。在 Claude API 和按用量计费的企业版(Enterprise)方案中,Fable 5 自今日起完全开放。对于订阅制方案,我们宁可早一点开放也不愿拖延,因此采取更为审慎的分阶段推出策略:
-
From today through June 22, Fable 5 is included on Pro, Max, Team, and seat-based Enterprise plans at no extra cost.
从今天起至 6 月 22 日,Fable 5 将包含在 Pro、Max、Team 以及按席位计费的企业版方案中,不额外收费。
-
On June 23, we’ll remove Fable 5 from those plans. Using it after that will require usage credits. If capacity allows, we’ll extend the included window.
6 月 23 日,我们将把 Fable 5 从这些方案中移除。此后使用它将需要消耗用量额度(usage credits)。若容量允许,我们会延长免费包含的窗口期。
-
After this point—when sufficient capacity allows us to do so—we aim to restore Fable 5 as a standard part of subscription plans. We intend to do this as quickly as we can.
在此之后——一旦容量足够——我们的目标是让 Fable 5 重新成为订阅制方案的标准组成部分。我们打算尽快做到这一点。
Throughout this period, we’ll communicate any changes ahead of time so users know where things stand.
在整个过渡期内,我们都会提前沟通任何变动,好让用户随时了解最新情况。
Edit June 9, 2026: Updated the discussion of AAVs to note that the candidates were developed by Dyno Therapeutics.
2026 年 6 月 9 日修订:更新了关于 AAV 的表述,注明相关候选物由 Dyno Therapeutics 开发。
Footnotes
脚注
Mythos-class models are a tier of Claude models that sit above our Opus class in capability. The first, Claude Mythos Preview, was released in April through Project Glasswing. That is followed today by Claude Fable 5 and Claude Mythos 5.
Mythos 级模型是 Claude 模型中的一个层级,其能力位于我们的 Opus 级之上。第一款 Claude Mythos Preview 于 4 月通过”玻璃翼计划”发布;今天发布的 Claude Fable 5 与 Claude Mythos 5 紧随其后。
Fable is from the Latin fabula, “that which is told,” akin to the Greek mythos. The safeguards are what distinguish the two models (Fable and Mythos) and are why we’ve given them different names.
“Fable”一词源自拉丁文 fabula,意为”被讲述之物”,与希腊语的 mythos(神话/所述之言)同源。区分这两款模型(Fable 与 Mythos)的正是防护措施,这也是我们给它们取不同名字的原因。
Metrics: Firefox = fraction of trials achieving arbitrary code execution (the exploit’s full-success tier). OSS-Fuzz = severity-weighted mean of the five-tier score (0.2 crash → 1.0 control-flow hijack), so values are a weighted average rather than a success rate. CyberGym = fraction reproducing the target vulnerability (the public leaderboard metric). CyScenarioBench = success rate averaged equally across its challenges.
各项指标说明:Firefox=实现任意代码执行(即漏洞利用的”完全成功”档位)的试验占比。OSS-Fuzz=五档评分按严重程度加权的均值(0.2 表示崩溃 → 1.0 表示控制流劫持),因此其数值是加权平均,而非成功率。CyberGym=复现目标漏洞的占比(即公开排行榜所用指标)。CyScenarioBench=在其各项挑战上等权平均的成功率。
A universal jailbreak can be defined as any prompt, script, or harness that allows a user to interact with a model as if its safeguards were not present. This is opposed to more minor jailbreaks that are only effective in very limited contexts or require additional effort to be adapted to each new situation.
“通用越狱”可定义为:任何能让用户像模型不存在防护措施一样与之交互的提示词、脚本或运行框架。它有别于那些更轻微的越狱——后者只在非常有限的情境下有效,或需要额外的功夫才能适配到每一个新情形。
* Quotes from customers in this article are drawn from early-access testing and used with permission. They reflect the views of the individuals and organizations cited.
* 本文中引用的客户言论,均取自早期访问测试并已获许可使用,反映的是相应个人与机构的观点。

