As part of our ongoing safety commitments, we have real-time cyber safeguards on Claude Opus and Sonnet models. These safeguards are designed to automatically detect and block requests that may indicate prohibited or high-risk cybersecurity usage based on our Usage Policy.
How this works
Our cyber safeguards currently block two categories of activities:
Cyber Verification Program
Many cybersecurity practitioners do legitimate work that overlaps with the dual use category above. The Cyber Verification Program (CVP) is a free application-based program for Opus and Sonnet that is designed to enable professionals to continue working on legitimate dual use tasks safely while minimizing interruption.
If your use case has a legitimate defensive purpose and is being affected by these safeguards, we encourage you to apply for the CVP. See How to apply below for the right path based on how you access Claude.
CVP requires data retention to be enabled. If your API organization uses Zero Data Retention (ZDR), you can set up a separate workspace with data retention turned on. If you have a sales-managed Claude Enterprise or Claude Teams account, contact your Anthropic Sales Representative to get started.
How to apply
How you apply depends on how you access Claude. Once you submit your application, we aim to send an email notification with our review decision within 2 business days.
Are you a platform owner? If you use Claude to power products or services available to your customers and want to learn whether your platform is eligible to participate in the Cyber Verification Program, please fill out this Platform CVP Interest Form.
Appeals
We expect to occasionally decline eligible applications incorrectly, and approved users may still experience blocks on legitimate work. We’re actively working to reduce both.
If you’re encountering one of these issues, we recommend checking the following:
Are you signed in to the right organization? CVP approval is tied to a specific organization ID. If you're hitting blocks on a different organization—for example, your personal workspace instead of your team's organization—the approval doesn't carry over. Compare the organization ID where you're seeing blocks against the one on your approval email.
Is the activity actually dual use? CVP approval only lifts blocks on dual use activities. Prohibited use activities (e.g., mass data exfiltration, ransomware code development) remain blocked regardless of CVP status.
If you've checked both and still believe something is wrong, you can submit a report or appeal form. Your feedback helps us refine these safeguards.