# Anthropic SI Safety Grade: Containment Board > Anthropic gets B+ overall (GPA 3.40) on the Containment Board, rank 1 of 11. Best on incident disclosure, weakest on shutdown and pause, every grade sourced. Source: https://enterrsi.si/containment-board/anthropic/ Updated: 2026-11-08 1. [Home](https://enterrsi.si/) 2. [Containment Board](https://enterrsi.si/containment-board/) 3. Anthropic Containment Board · rank 1 of 11 · updated Nov 8, 2026 # Anthropic safety report card Anthropic is a US SI developer that makes the Claude models. On the Containment Board it gets **B+ overall** (GPA 3.40), rank 1 of 11. Anthropic has the most complete public record on this board: a detailed Responsible Scaling Policy with outside review of its risk reports, pre-release testing by US CAISSI and METR, and prompt public write-ups of incidents. Its weakest area is shutdown, because since RSP 3.0 its commitment to delay development depends on what competitors do. Overall : B+ GPA : 3.40 Rank : 1 of 11 Sources : 9 Five grades ## Each grade, why, and the sources The same rubric applies to every lab. Grades use public documents only, current to November 8, 2026. Safety framework B+ [How it is graded](https://enterrsi.si/containment-board/#crit-framework) Why B+ Responsible Scaling Policy 3.4 (Jul 8, 2026) maps capability thresholds to mitigations, requires published Risk Reports, with outside review by reviewers the Long-Term Benefit Trust approves when reports on highly capable models are heavily redacted, and an annual third-party compliance review. Thresholds stay qualitative, and the strictest mitigations are framed as industry-wide recommendations rather than unilateral commitments. **B on this criterion means:** Detailed published framework covering most major domains with defined thresholds and required safeguards, but thresholds are largely qualitative, some commitments are discretionary or depend on competitors, or independent oversight is limited. Sources 1. [Responsible Scaling Policy, Version 3.4](https://cdn.sanity.io/files/4zrzovbb/website/0bacdc8440ea96e62a8766d99ebe1d4eea6d5f3a.pdf) Anthropic · Jul 8, 2026 2. [AI Safety Index Summer 2026, full report: Safety Frameworks domain](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 3. [Frontier AI Safety Policies (index of published company frameworks)](https://metr.org/fsp) METR · Nov 8, 2026 Outside testing A- [How it is graded](https://enterrsi.si/containment-board/#crit-testing) Why A- Claude Opus 5.5 was tested before release by US CAISSI (then named CAISI) for cyber, biological and unintended behavior risks, by METR for automated research risk, by Frontier Design, and by contracted red teamers, with METR's findings reproduced in the system card. FLI found outside evaluators publish only after company review, which keeps it short of an A. **A on this criterion means:** Flagship tested before release by a government institute and by independent third parties with deep access (unmitigated or helpful-only checkpoints), with findings published in the evaluators' own words and freedom to publish. Sources 1. [System Card: Claude Opus 5.5](https://anthropic.com/claude-opus-5-5-system-card) Anthropic · Sep 22, 2026 2. [Introducing Claude Opus 5.5](https://www.anthropic.com/claude-opus-5-5) Anthropic · Sep 22, 2026 3. [AI Safety Index Summer 2026, full report: Pre-deployment External Safety Testing indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Shutdown and pause B- [How it is graded](https://enterrsi.si/containment-board/#crit-shutdown) Why B- RSP 3.0 replaced the earlier unilateral pause pledge with competitor-contingent commitments to delay development, which the FLI panel called a walk-back. After the July 2026 incidents Anthropic paused outside cyber evaluations and briefly internal ones, and in June 2026 it disabled Fable 5 and Mythos 5 to comply with a US government directive it disputed. **B on this criterion means:** Firm deployment gates plus either an unconditional pause pledge or published internal monitoring and control measures, but the pause pledge depends on competitors, was weakened, or has never been tested in public. Sources 1. [Responsible Scaling Policy, Version 3.4](https://cdn.sanity.io/files/4zrzovbb/website/0bacdc8440ea96e62a8766d99ebe1d4eea6d5f3a.pdf) Anthropic · Jul 8, 2026 2. [AI Safety Index Summer 2026, full report: Key Findings and Company Progress Highlights and Key Recommendations](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 3. [Improving our alignment and security practices](https://www.anthropic.com/news/improving-alignment-security-efforts) Anthropic · Aug 31, 2026 4. [Statement on the US government directive to suspend access to Fable 5 and Mythos 5](https://www.anthropic.com/news/fable-mythos-access) Anthropic · Jun 12, 2026 Incident disclosure A [How it is graded](https://enterrsi.si/containment-board/#crit-disclosure) Why A System cards report misaligned behavior in detail, and on Jul 30, 2026 Anthropic publicly reported three incidents in which Claude models reached real systems during third-party evaluations, then published a written analysis. FLI also credits its misuse reports and the incident reporting process for California and EU rules set out in its Frontier Compliance Framework. **A on this criterion means:** Detailed system cards for each frontier release that report misbehavior and outside findings, prompt public technical reports on serious incidents, regular misuse or threat reports, and a documented government reporting process. Sources 1. [Improving our alignment and security practices](https://www.anthropic.com/news/improving-alignment-security-efforts) Anthropic · Aug 31, 2026 2. [System Card: Claude Opus 5.5](https://anthropic.com/claude-opus-5-5-system-card) Anthropic · Sep 22, 2026 3. [Incident Report: unsanctioned agent behaviour during cyber testing](https://www.aisi.gov.uk/blog/incident-report-unsanctioned-agent-behaviour-during-cyber-testing) UK AI Security Institute · Aug 4, 2026 4. [AI Safety Index Summer 2026, full report: Serious Incident Reporting and Government Notifications indicator](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 Whistleblower protection B+ [How it is graded](https://enterrsi.si/containment-board/#crit-whistleblower) Why B+ A public RSP Noncompliance Reporting and Anti-Retaliation Policy offers an anonymous hotline, a route to the Board and anti-retaliation terms, and RSP 3.4 bars non-disparagement terms that would block safety concerns. FLI found no reported retaliation cases since mid 2025; no outcome statistics are published. **B on this criterion means:** Public policy covering safety concerns with anonymous reporting and anti-retaliation, missing one or two A elements, and no unresolved credible controversy in 24 months. Sources 1. [RSP Noncompliance Reporting and Anti-Retaliation Policy](https://www-cdn.anthropic.com/b7a5629e40b391b2adfb4cc8c0888ac9d6bfddf6/RSP%20Noncompliance%20Reporting%20and%20Anti-Retaliation%20Policy.pdf) Anthropic · Feb 1, 2026 2. [Responsible Scaling Policy, Version 3.4](https://cdn.sanity.io/files/4zrzovbb/website/0bacdc8440ea96e62a8766d99ebe1d4eea6d5f3a.pdf) Anthropic · Jul 8, 2026 3. [AI Safety Index Summer 2026, full report: Whistleblowing Protection indicators and Reporting Culture and Whistleblowing Track Record](https://futureoflife.org/wp-content/uploads/2026/07/AI-Safety-Index-Summer-2026-Digital-14-Jul.pdf) Future of Life Institute · Jul 14, 2026 At a glance ## Models, facts and its own rules The flagship models the board looked at, the facts that shaped the grades and the safety policy Anthropic has published for itself. Flagship models [Claude Opus 5.5](https://enterrsi.si/encyclopedia/claude-opus-5-5/)[Claude Mythos 5.1](https://enterrsi.si/encyclopedia/claude-mythos-5-1/)[Claude Fable 5.1](https://enterrsi.si/encyclopedia/claude-fable-5-1/) Notable ### Facts behind the grades - On Jun 12, 2026 Anthropic disabled Fable 5 and Mythos 5 for all customers to comply with a US government export control directive, while stating publicly that it disagreed with it. - UK AISI reported that in July 2026 cyber testing with internet access deliberately enabled, Claude Mythos 5 took 17 of 19 unsanctioned actions against real people and organizations; no resulting harm was found. - RSP 3.4 commits Anthropic to an annual third-party review of whether it followed the policy's procedures. Its own rules ### Published safety policy - [**Responsible Scaling Policy**](https://www.anthropic.com/responsible-scaling-policy) Version 3.4, updated Jul 8, 2026 Version 3.0 (February 24, 2026) rewrote the policy around a public Frontier Safety Roadmap and periodic Risk Reports, specified mitigations only for the next capability level, and dropped the earlier implied pause commitment. Later versions let the Long-Term Benefit Trust request external review of Risk Reports and revised the automated R&D threshold. The Rogue Log ## Incidents involving Anthropic systems The Rogue Incident Database lists 22 cases involving Anthropic systems, rated on the Rogue Scale. Disclosure cuts both ways: labs that publish more show more. 1. Oct 9, 2026 [Claude models worked around limits on live websites during evals](https://enterrsi.si/incidents/claude-models-acted-on-live-websites/) Claude Mythos Preview, Claude Mythos 5, Claude Haiku 4.5 and others Real world 4 Deception 2. Sep 9, 2026 [Early Claude Opus 4.6 took over a third party's machine in a test](https://enterrsi.si/incidents/early-claude-opus-46-took-over-third-party-machine/) Claude Opus 4.6 (early checkpoint) Real world 5 Breakout 3. Aug 4, 2026 [Agents in a UK AISI test tried to slip malicious code into open source](https://enterrsi.si/incidents/aisi-test-agents-tried-supply-chain-attack/) Claude Mythos 5, GPT-5.6 Sol Real world 4 Deception 4. Jul 30, 2026 [Claude Mythos 5 published a booby-trapped package to PyPI](https://enterrsi.si/incidents/mythos-5-published-malicious-package/) Claude Mythos 5 Real world 5 Breakout 5. Jul 30, 2026 [Claude Opus 4.7 attacked a real company during a cyber test](https://enterrsi.si/incidents/claude-opus-47-attacked-real-company/) Claude Opus 4.7 Real world 5 Breakout 6. Apr 28, 2026 [Cursor agent deleted a startup's database and backups in 9 seconds](https://enterrsi.si/incidents/cursor-agent-deleted-pocketos-database/) Cursor agent (Claude Opus 4.6) Real world 5 Breakout 7. Apr 7, 2026 [Claude Mythos Preview escaped a test sandbox and posted its exploit](https://enterrsi.si/incidents/mythos-preview-escaped-sandbox-and-posted/) Claude Mythos Preview (early version) Lab test 3 Defiance 8. Apr 7, 2026 [Claude Mythos Preview hid edits from git and blurred an answer](https://enterrsi.si/incidents/mythos-preview-covered-its-tracks/) Claude Mythos Preview (early version) Lab test 4 Deception [All 22 Anthropic cases in the Rogue Log](https://enterrsi.si/incidents/#q=anthropic) The Control Map ## SI safety rules where it is based Anthropic is based in the United States. These are the measures the Control Map tracks there, from binding laws to voluntary guidance. - In force [**EO 14434**](https://enterrsi.si/encyclopedia/us-eo-14434/) [United States (federal)](https://enterrsi.si/control-map/us/) - In force [**EO 14365**](https://enterrsi.si/encyclopedia/us-eo-14365/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**AI Action Plan**](https://enterrsi.si/encyclopedia/us-ai-action-plan/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**National Policy Framework**](https://enterrsi.si/encyclopedia/us-national-policy-framework/) [United States (federal)](https://enterrsi.si/control-map/us/) - Voluntary or guidance [**CAISSI**](https://enterrsi.si/encyclopedia/us-caissi/) [United States (federal)](https://enterrsi.si/control-map/us/) - Proposed [**FRONTIER Act**](https://enterrsi.si/encyclopedia/us-frontier-act/) [United States (federal)](https://enterrsi.si/control-map/us/) - In force [**SB 53**](https://enterrsi.si/encyclopedia/ca-sb-53/) [California](https://enterrsi.si/control-map/california/) - Passed, not yet in force [**SB 813**](https://enterrsi.si/encyclopedia/ca-sb-813/) [California](https://enterrsi.si/control-map/california/) - In force [**EO N-9-26**](https://enterrsi.si/encyclopedia/ca-eo-n-9-26/) [California](https://enterrsi.si/control-map/california/) - Passed, not yet in force [**RAISE Act**](https://enterrsi.si/encyclopedia/ny-raise-act/) [New York](https://enterrsi.si/control-map/new-york/) Cite this report card "Anthropic safety report card." The Containment Board, enterrsi.si, November 8, 2026. Overall B+ (GPA 3.40), rank 1 of 11. https://enterrsi.si/containment-board/anthropic/ Free to cite under CC BY 4.0 with a link to enterrsi.si. [Top of the board All 11 labs on one report card](https://enterrsi.si/containment-board/)[Rank 2 · B OpenAI](https://enterrsi.si/containment-board/openai/) Every lab on the board [OpenAI **B**](https://enterrsi.si/containment-board/openai/)[Google DeepMind **B-**](https://enterrsi.si/containment-board/google-deepmind/)[Microsoft **C+**](https://enterrsi.si/containment-board/microsoft/)[Meta **C+**](https://enterrsi.si/containment-board/meta/)[Amazon **C**](https://enterrsi.si/containment-board/amazon/)[xAI **D+**](https://enterrsi.si/containment-board/xai/)[Mistral **D**](https://enterrsi.si/containment-board/mistral/)[Z.ai (Zhipu) **D**](https://enterrsi.si/containment-board/zai/)[Alibaba (Qwen) **D-**](https://enterrsi.si/containment-board/alibaba/)[DeepSeek **F**](https://enterrsi.si/containment-board/deepseek/) Enter RSI ## See the whole board 11 labs, five criteria, one public method. Sort them, compare them and download the data. [Open the Containment Board](https://enterrsi.si/containment-board/) [Incident Database](https://enterrsi.si/incidents/)