For months, the architects of the world’s most powerful Artificial Intelligence models—including OpenAI, Anthropic, and Google—have engaged in a high-stakes balancing act. They have developed elaborate, vetted programs and rigid safety guardrails designed to prevent their models from being weaponized by malicious actors. However, as these digital fences grow higher, a growing chorus of cybersecurity experts, researchers, and government contractors are warning that these same mechanisms are inadvertently crippling the "good guys."
By blocking legitimate inquiry, these AI giants are hindering the very network defenders and offensive researchers who work to identify vulnerabilities before they can be exploited by cybercriminals.
The Genesis of the Crisis: Mythos, Fable, and Export Controls
The tension between AI safety and operational utility reached a boiling point in June, when the U.S. government imposed strict export control restrictions on Anthropic’s flagship models, Mythos and Fable. This intervention was reportedly triggered by allegations that users had discovered ways to bypass the models’ internal guardrails, effectively turning the AI into a platform for drafting and executing malicious cyberattacks.
While Anthropic had marketed Mythos as a cutting-edge, highly secure instrument intended only for vetted professionals, the government’s move highlighted the perceived fragility of these safeguards. The subsequent backlash and the temporary removal of these models from public access underscored a fundamental question: Can an AI model be powerful enough to solve complex security problems without being dangerous enough to create them?
Although the export controls on Fable 5 and Mythos 5 were eventually lifted, the incident left a lasting mark on the industry. Fable 5 returned to general availability on July 1, but Mythos 5 remains restricted to a select group of U.S.-based organizations, subject to ongoing government oversight.
A Chronology of Gatekeeping
The "gatekeeping" of AI is not a new phenomenon, but it has accelerated alongside the capabilities of Large Language Models (LLMs).
- April 2026: Anthropic introduces Mythos with significant fanfare, branding it a "doomsday cybermachine" that requires strict vetting to access.
- June 2026: The U.S. government pulls the plug on Mythos and Fable following reports of potential jailbreaks that could facilitate cyberattacks.
- Late June 2026: Industry pushback begins as cybersecurity researchers report that their daily workflows are being interrupted by increasingly sensitive safety filters.
- July 2026: Limited access is restored to Fable 5, but the broader debate regarding the efficacy and necessity of these guardrails intensifies.
Throughout this period, both Anthropic and OpenAI have launched specialized initiatives—OpenAI’s Trusted Access for Cyber and Anthropic’s Cyber Verification Program (CVP)—to grant "safe" researchers access to less restricted versions of their models. However, critics argue these programs are insufficient, arbitrary, and fundamentally misunderstood by the tech companies themselves.
The Dual-Use Dilemma: A Tool or a Weapon?
At the heart of the controversy is the concept of "dual-use" technology. As Chris Anley, Chief Scientist at NCC Group, points out, the same prompt that helps a defender patch a critical vulnerability—"fix this code"—is identical to the prompt an attacker might use to identify and weaponize that same vulnerability.
"This is where the whole offensive versus defensive and guardrails part comes in," Anley explained. "The same tool is both an offensive tool and a defensive tool, and the two can’t really be unpicked. It’s like a hammer. You can’t build a house without a hammer. It’s definitely a tool, but it’s also irreducibly a weapon."
The frustration among researchers is palpable. Mark Dowd, a veteran security researcher renowned for his work on "zero-day" vulnerabilities, has been vocal about the discomfort of having private, for-profit corporations acting as the arbiters of security research. "It’s not really comfortable to me that these random large companies are making arbitrary decisions about what is safe in security and what’s not," Dowd stated during a recent podcast appearance.
The Shift to Local, Unrestricted Models
Because of the perceived over-sanitization of U.S.-based frontier models, many in the offensive cybersecurity sector are migrating to open-source alternatives.
Paolo Stagno, CTO at the vulnerability research firm Crowdfense, argues that AI companies are "treating customers like children who need babysitting." His team now avoids cloud-based frontier models entirely for sensitive vulnerability research. Instead, they run open-source, locally hosted models that lack built-in guardrails. This strategy avoids the risk of sensitive data being exfiltrated or absorbed into a corporation’s future training sets, while also eliminating the "negotiation" phase where a researcher spends more time arguing with a chatbot than analyzing code.
This trend is not limited to boutique research firms. Even anonymous researchers at major hardware manufacturers have reported that if their AI assistant "catches wind" of security-related tasks, it simply stops responding, rendering it effectively useless for their daily operations.
Implications for Global Cybersecurity
The most alarming implication of this trend is the potential "brain drain" of security talent away from Western-governed systems. Chris Thompson, CEO of RemoteThreat and founder of the Offensive AI Con, warns that guardrails are creating a perverse incentive structure.
"You have these responsible researchers who are being pushed away from U.S.-governed systems to foreign-owned systems," Thompson noted, pointing to the adoption of Chinese open-source models like GLM, which offer no usage restrictions. "I think it’s more harmful than good to have these guardrails in place."
Thompson argues that the current approach is reactive and short-sighted. By spending hours navigating inconsistent guardrails, researchers are losing the ability to proactively secure systems against the "big wave" of AI-powered attacks looming on the horizon. He calls for a shift toward accountability-based models: instead of restricting the tool, providers should grant access to responsible entities and hold them legally accountable for any abuse of the technology.
The Researcher’s Perspective: "Jealous of My Bugs"
Not all researchers find the guardrails equally obstructive. Giuseppe Cali, an expert in zero-day exploits, notes that he intentionally limits the scope of AI in his work. He uses models primarily for reverse engineering and administrative tasks, preferring to keep the actual discovery and weaponization of vulnerabilities entirely manual.
"I still want to own the actual bug discovery and weaponization myself," Cali said. "I am jealous of my bugs, and I like this game too much to let models play it for me."
However, Cali is an exception in a field that is rapidly automating. For the majority of consultants, engineers, and network defenders, the "AI race" is currently being won by attackers who have no interest in safety guardrails, while the defenders are being forced to fight with one hand tied behind their backs.
Conclusion: A Call for Reform
As the cybersecurity landscape evolves, the friction between AI safety and practical defense will only grow. If the goal of these guardrails is to prevent a catastrophic cyber event, the unintended consequence appears to be the erosion of the professional defense infrastructure.
The consensus among the experts interviewed is clear: The "nanny state" approach to AI models is failing those it is intended to protect. To stay ahead of malicious actors, the industry must move toward a model of "responsible access" rather than "arbitrary obstruction." Without a recalibration, the very tools designed to secure our digital future may instead leave the door wide open for those who choose to ignore the guardrails entirely.
