Delinea<\/a> is an identity security platform. It controls what AI agents, humans, and machines can do once they gain access to a system. As part of Project Glasswing, Delinea is now testing Claude Mythos 5.1 on its own code.<\/p>\n\n\n\nThe testing starts with the systems that store, broker, and rotate privileged credentials. This is sensitive code, and a flaw in it could expose every system it protects.<\/p>\n\n\n\n
Project Glasswing brings together organizations whose software supports critical infrastructure. A successful attack on this software could have serious consequences. Identity security fits squarely into that category, which is why Delinea decided to take part.<\/p>\n\n\n\n
Delinea’s code already goes through security review and adversarial testing. However, Project Glasswing adds a frontier AI model to that process, applying it directly to Delinea’s own codebase.<\/p>\n\n\n\n
“AI is making it much easier to find weaknesses in software, and that changes what customers should expect from security companies,” said Art Gilliland, CEO at Delinea. “We joined Project Glasswing to use the best tools available to attack our own assumptions and find problems before someone else does.”<\/p>\n\n\n\n
The AI model’s work covers several areas. First, it examines credential and secrets handling, including vaulting logic, secret storage and rotation, key management, and cryptographic implementation. Next, it reviews session brokering and privileged access paths \u2014 the connection, injection, and proxy code that sits between a user or agent and a target system.<\/p>\n\n\n\n
The model also checks authorization enforcement, including policy evaluation and just-in-time authorization paths. According to Delinea, a logic flaw in these paths can be just as serious as a memory-safety vulnerability.<\/p>\n\n\n\n
Findings then feed back into Delinea’s software development lifecycle. Triage and remediation happen through the company’s existing product security process. Meanwhile, recurring patterns become secure coding standards, pre-merge checks, and test coverage, so each fix strengthens later releases.<\/p>\n\n\n\n
Delinea has also put limits around how the AI model operates. “We’re treating Mythos like any other privileged identity: its access is scoped, temporary and logged,” said Pierre Mouallem, Chief Information Security Officer at Delinea. “It runs against our code in an isolated environment with no customer data in scope. Anything it finds enters the same product security and disclosure process as a human-reported vulnerability.”<\/p>\n\n\n\n
Delinea plans to share validated findings and remediation patterns with the other organizations in the Project Glasswing cohort. For issues affecting third-party or open-source components, the company will follow coordinated vulnerability disclosure timelines.<\/p>\n\n\n\n
Any vulnerabilities found in Delinea’s own products will be disclosed through Delinea’s Security Advisories site.<\/p>\n\n\n\n
In short, Delinea’s participation in Project Glasswing marks another step toward applying frontier AI to the defense of critical infrastructure software, starting with the identity systems that guard access across an organization.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
Delinea has joined Project Glasswing, an Anthropic initiative that uses […]<\/p>\n","protected":false},"author":58,"featured_media":107467,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[9716,9661],"tags":[9810],"contributor":[9732],"class_list":["post-107468","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-global-brands","category-tech-value-chain","tag-delinea","contributor-news-desk"],"featured_image_src":"https:\/\/techxmedia.com\/en\/wp-content\/uploads\/2026\/09\/SEPTEMBER-NEWS-FILE-44.jpg","author_info":{"display_name":"Lubna","author_link":"https:\/\/techxmedia.com\/en\/author\/lubna\/"},"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t