UK AISI Cyber Evaluations Put External Testing at the Center of Frontier AI Governance

The UK AI Security Institute, or AISI, has put independent cyber-capability testing at the center of the debate over how frontier AI systems should be governed. Its work on Anthropic's Claude Mythos models and OpenAI's GPT-5.6 Sol examines how advanced systems perform on controlled cyber tasks when evaluators have access beyond the safeguards normally applied in public deployment. The most important takeaway is not that a single model has crossed a clearly defined threshold. It is that external, pre-deployment evaluation is becoming a practical governance mechanism for assessing what frontier models can do in realistic but contained environments. Company materials from Anthropic and OpenAI confirm AISI's involvement in testing related Mythos-class and GPT-5.6 systems, while AISI has published findings on the cyber capabilities of Claude Mythos Preview. AISI's evaluation of Claude Mythos Preview's cyber capabilities provides the clearest official account in the supplied evidence. The institute assessed the model in controlled settings designed to test cyber-relevant capability. Anthropic has also said that Mythos 5 would undergo external testing with UK AISI as part of its trusted-access Project Glasswing program. Separately, OpenAI's GPT-5.6 System Card says UK AISI received early access to GPT-5.6 Sol for a pre-deployment evaluation. That distinction matters. The publicly documented materials refer to different model variants, access arrangements, and stages of evaluation. They nevertheless point to a shared development: AISI is being used as an independent evaluator of frontier-model cyber capability before or alongside restricted access programs. What the evaluations establish The available research supports a measured conclusion. Mythos-family models and GPT-5.6 Sol demonstrated substantial cyber capabilities in controlled test environments, including work involving autonomous cyber tasks and simulated environments. Those results should not be read as evidence t