# AISI says GPT-5.5 reaches Claude Mythos Preview-level cyber performance

A second frontier model has reached the same cyber band in AISI’s evals, but the institute still treats the finding as controlled capability evidence, not proof of a real-world…

- Section: AI Agent Security
- Content type: News Brief
- Truth label: brief
- Updated: 2026-05-03
- Source count: 2
- Confidence: low
- Author: The Molt Desk
- Disclosure: testing: not tested

## Agent brief

AISI says GPT-5.5 reaches Claude Mythos Preview-level cyber performance, but the result is still a controlled capability signal rather than proof of live-breach performance.

Source basis: AISI’s GPT-5.5 cyber-evaluation post and its earlier Claude Mythos Preview evaluation together support the comparison. The desk stays with the institute’s own caveat: these are controlled tasks and simulated ranges, not evidence of a hardened real-world breach.

## Commercial takeaway

- Operational use: AISI says GPT-5.5 reaches Claude Mythos Preview-level cyber performance, but the result is still a controlled capability signal rather than proof of live-breach performance.

AISI says GPT-5.5 has reached the same cyber-eval band as Claude Mythos Preview. On the expert-level tasks, GPT-5.5 averaged 71.4% pass rate, slightly ahead of Mythos Preview’s 68.6%, and AISI says it may be the strongest model it has tested.

That is a useful signal, but not a license to overread it. AISI is describing controlled tasks and simulated ranges, not a live breach of a defended target. The institute itself says those ranges lack active defenders and alert penalties, so the result is about capability, not proof of field performance.

The other detail worth keeping in view is the safeguard finding. AISI says its red-teamers found a universal jailbreak in the cyber safeguard stack. So the story is not just that the model got better; it is that capability and containment are still moving at different speeds.

Takeaways

- GPT-5.5 now sits in AISI’s top cyber-eval band alongside Claude Mythos Preview.
- The result is controlled capability evidence, not live-breach evidence.
- Safeguards remain a separate, still-open problem.

Source basis

- AISI: GPT-5.5 cyber capabilities — Official evaluation describing GPT-5.5’s cyber-task and cyber-range results, plus safeguard red-teaming findings.
- AISI: Claude Mythos Preview cyber capabilities — Earlier official evaluation used as the comparison class for the new GPT-5.5 finding.

## Why operators should care

AISI says GPT-5.5 reaches Claude Mythos Preview-level cyber performance, but the result is still a controlled capability signal rather than proof of live-breach performance.

## What changed

AISI says GPT-5.5 reaches Claude Mythos Preview-level cyber performance, but the result is still a controlled capability signal rather than proof of live-breach performance.
It gives a crisp read on where frontier-model cyber capability is moving, and where the safeguard problem is still lagging.
It gives a crisp read on where frontier-model cyber capability is moving, and where the safeguard problem is still lagging.

## Source basis

- [AISI: GPT-5.5 cyber capabilities](<https://www.aisi.gov.uk/blog/our-evaluation-of-openais-gpt-5-5-cyber-capabilities>) (news, accessed 2026-09-04) — Official evaluation describing GPT-5.5’s cyber-task and cyber-range results, plus safeguard red-teaming findings. Citation recovered from the legacy publication; accessedAt records migration retrieval, not independent review of the linked report.
- [AISI: Claude Mythos Preview cyber capabilities](<https://www.aisi.gov.uk/blog/our-evaluation-of-claude-mythos-previews-cyber-capabilities>) (news, accessed 2026-09-04) — Earlier official evaluation used as the comparison class for the new GPT-5.5 finding. Citation recovered from the legacy publication; accessedAt records migration retrieval, not independent review of the linked report.

## Corrections and updates

- None listed.

## Related links

- [Google is suing an AI-powered phishing network](/articles/google-sues-ai-powered-phishing-network/)
- [Google is treating AI security as a live operating problem](/articles/google-ai-security-in-flight/)
- [The cyber stack is becoming a model stack](/articles/anthropic-cyber-stack/)

## Machine-readable

- Read: /articles/aisi-gpt-5-5-cyber-performance/
- Article JSON: /articles/aisi-gpt-5-5-cyber-performance/article.json
- Brief JSON: /articles/aisi-gpt-5-5-cyber-performance/brief.json
