Cisco Puts Anthropic's Claude Mythos Inside AI Defense Red Teaming

Cisco will add Anthropic's Claude Mythos to AI Defense's adaptive red-teaming framework, the company announced on November 9, 2026, at Cisco Live APJC in Melbourne. The release extends beyond testing: it also introduced Splunk agent-observability updates and Cisco IQ integrations covering agent-cost evaluation and infrastructure remediation.

Customers won't prompt Claude Mythos freely. The model runs inside a fixed job with a registered target and human-defined objectives, supplying reasoning for test planning and attack ideation while AI Defense conducts the engagement.

Where does the red-teaming model's reasoning stop?

A Cisco technical overview splits testing into standard and adaptive modes. Standard red teaming checks prompt injection, jailbreaks, sensitive-data exposure and harmful content across thousands of categories, content types and adversarial techniques. Adaptive testing starts from customer criteria in plain language, analyzes the target, develops tailored attacks, and uses responses to refine its approach or change tactics before reporting findings and recommending follow-up actions.

The safeguards constrain where that reasoning goes. Claude Mythos operates only against targets explicitly registered, owned and authorized by the enterprise customer, and Cisco says it cannot scan arbitrary internet infrastructure. Every engagement requires authentication and is cryptographically tied to a named operator. Sessions are time-bound and can be halted, each action is recorded for audit, and results can feed repeatable follow-up attack loops.

Standard and adaptive red teaming are already available in AI Defense. The Claude Mythos version is coming soon for select enterprises, with broader availability planned for qualified customers on no committed date; Cisco says timing, scope and regional availability may change. The company reports AI Defense has helped hundreds of customers identify flaws in models, applications and agents before production since its January 2025 launch.

How does Splunk tie agent cost to output quality?

The Splunk Agent Observability updates target the operating side of agent deployment. Enhanced Tokenomics will use Amazon Bedrock and Amazon CloudWatch usage data to pair each agent's cost with evaluations of its work quality and impact. Those metrics can combine with customer-defined measures such as Net Promoter Score or cost per claim, extending token-spend attribution across AI agents and coding tools including Claude Code, Codex and Cursor.

Eval-G1 uses custom small language models to run evaluations and guardrails. Cisco reports they run at up to 98% lower cost than a commercial LLM and deliver evaluation responses 2.5 times faster than traditional LLM judges. The evaluation tuner turns agentic traces and subject-matter-expert feedback into fine-tuned evaluators that enforce quality standards and steer or block inaccurate agent behavior.

Availability is staggered. Eval-G1 and the evaluation tuner are generally available starting November 2026. Tokenomics enters private preview in December 2026, with general availability in AWS Marketplace in early 2027.

What does Cisco IQ change for remediation?

Cisco says IQ serves close to 17,000 customers across more than 22 million connected devices, providing asset, coverage and advisory context. The IQ remediation workflow sends vulnerability, lifecycle and configuration data through Cisco Data Fabric into Splunk Platform via open APIs. Security teams and AI agents can then correlate live detections in Splunk Enterprise Security with underlying network exposure.

Model Context Protocol and ServiceNow connectors add structured infrastructure context to supported agents and IT-service workflows. Exposure findings convert into asset-linked ServiceNow problem records without manual data reconciliation. Cisco cautions that finding an exposure doesn't establish that an attacker exploited it: the workflow adds investigation context and coordinates remediation rather than treating each finding as a confirmed breach.

The AI-Powered Resilient Infrastructure Playbook also surfaces critical lifecycle vulnerabilities, personalized alerts for known defects and quantum-safe cryptographic readiness so teams and certified partners can prioritize modernization.

The gap is timing. Evaluation models and the tuner are generally available now, but Mythos-enabled red teaming and Tokenomics are not, so the end-to-end workflow Cisco describes still depends on future or limited releases.