Claude Fable 5.1 may now hunt for vulnerabilities, but not exploit them. And the price cut is one cell in a table.

Anthropic released Claude Fable 5.1 and Claude Mythos 5.1 today. Most of the coverage will be about benchmarks and about the price falling roughly 25%. Two other things in the announcement matter more to anyone responsible for security, and neither is being reported.

The first is a sentence about safeguards. The second is that the price did not fall in the way the headline suggests, and the pricing table shows exactly why.

The line moved, and Anthropic said so plainly

Here is the sentence, in full: the newest safeguards "block 60% fewer false positives than before. In part, this is because Fable 5.1 can now be used to discover software vulnerabilities, though not to develop exploits for them."

That is a vendor publishing a deliberate relaxation of a security control, with the measured effect attached and the new boundary named. It deserves credit for being said out loud, and it deserves to be read carefully.

The line Anthropic just moved, in its own words

The change itself is defensible and the argument for it is strong. A model that refuses to look at a crash dump, a stack trace or a suspicious binary is useless to precisely the people who most need it, and false positives were the price of the old setting. Cutting them by 60% is a real improvement in a real workflow. Defenders spend their days handling material that looks, to a naive classifier, exactly like attacker material, because it is attacker material.

What is worth carrying away is structural rather than critical.

The capability is not in the safeguard

Anthropic states that Fable 5.1 and Mythos 5.1 are the same model, differing only in the level of safeguards applied. It then reports that it evaluated the cyber capabilities of Mythos 5.1 "with cybersecurity safeguards off", and that the model "demonstrates the strongest cyber capabilities of any model we've released", while still falling within the lower risk category of its own Frontier Compliance Framework.

Put those two statements together and the architecture is clear. The thing that separates a general user from the strongest offensive-security capability Anthropic has shipped is a safeguard layer sitting in front of a model that already has it. That is a policy control, not a capability control, and a policy control is a thing that gets tuned. It has just been tuned.

This is not a criticism of the design. It is arguably the only workable design: you cannot train a model that can find vulnerabilities for defenders and cannot find them for attackers, because it is the same task. But it should change how a security team thinks about the assurance on offer. The assurance is about a classifier's behaviour, not about what the model can do.

Anthropic is careful about the assurance too, and the carefulness is worth noticing. It commissioned external testing of the Fable 5.1 cybersecurity safeguards from two organisations, added automated testing by Gray Swan, and reports that it has "not found evidence of a critical-severity jailbreak for these safeguards". Not having found evidence of one is a narrower claim than there not being one. The announcement makes the narrow claim, correctly, and a reader should quote it the same way.

Mythos 5.1, the version with the safeguards configured for cyber and life sciences work, is available only through trusted access programs. Currently that means "only a set of US organizations", with Anthropic saying it is coordinating with the US government to widen access to more domestic and international partners. So the frontier cyber capability is gated by vetting and by nationality, not by the weights. For a British or European defender, that is the operative fact in the whole release.

The price did not fall. One line item did.

Now the money, because the reporting on this is going to be wrong in a way that matters to anyone writing a budget.

One cell changed, and it is the whole price cut

Fable 5.1 costs $10 per million input tokens and $50 per million output tokens. So did Fable 5. The five-minute cache write is $12.50 in both. The one-hour cache write is $20 in both. Every published rate is identical, to the cent, except one: a cache read fell from $1.00 to $0.25.

That single change is the entire "25% cheaper" headline, and it makes the saving a fact about your workload rather than about the model.

The arithmetic is straightforward and Anthropic supplies both ends of it without joining them. A cache read fell 75%. If a typical bill falls 25%, then cache reads must have been a third of that bill. If a highly agentic bill falls 45%, cache reads were 60% of it. Generalise and you get a line any team can apply to its own console figures:

Your saving equals 0.75 multiplied by the share of your bill that is cache reads.

If your work is short, varied and low-context, your cache-read share is small and you will see very little of the 25%. If you run long agentic sessions over a large codebase, you may see more than 45%. The averages in the announcement are measured "at default effort over four weeks of actual usage in August 2026", which is a genuinely useful disclosure and also, necessarily, somebody else's four weeks.

There is a caveat in the announcement that cuts the other way, and it is easy to miss. Fable 5.1 defaults to High effort in Claude Code, and to Medium in Claude Cowork and on Claude.ai. A higher effort setting means more tokens. A team measuring its bill after the upgrade is measuring two changes at once, and only one of them is a reduction.

The pricing footnote nobody has picked up

There is one more thing in the pricing documentation that did not make the announcement. Anthropic publishes a general rule for what a cache hit costs: 0.1 times the base input price. That rule now carries a parenthetical exception. It reads: "0.1x base input price (0.025x on Claude Fable 5.1 and Claude Mythos 5.1)".

Fable 5.1 and Mythos 5.1 are the only models in the table not priced on the standard multiplier, and since Mythos is available to almost nobody, Fable 5.1 is the one most readers will meet. The consequence is a genuine oddity. Fable 5.1 input costs $10 per million tokens against Opus 5's $5, and its output costs $50 against $25. On both of those it is exactly twice the price. But its cache reads cost $0.25 against Opus 5's $0.50, which is half.

For a workload dominated by cache reads, and Anthropic's own figure says an agentic workload is 60% cache reads, the relative economics of the two models are no longer what the headline rates imply. That is worth modelling before assuming the cheaper-looking model is the cheaper one.

What the announcement does not cover

Two absences are worth stating, because both will be filled in by guesswork otherwise.

Nothing in the announcement concerns subscription plans. Every price in it is per token, framed as applying "wherever usage is billed by token, such as on our API". Pro and Max are not mentioned, and no statement is made about how Fable 5.1 is metered inside a subscription. A 25% reduction in token-billed cost does not translate mechanically into a subscription allowance, and anyone reporting that it does is going beyond the source.

And Enterprise Frontier Safeguards, the new data-retention arrangement, is not available yet. Anthropic describes it as storing data in cloud infrastructure controlled entirely by the customer rather than by Anthropic, giving "complete privacy (the same as a zero data retention policy)". It is to be made available to enterprise customers "in phases, beginning later this fall". Until then, eligible customers can use Fable 5.1 with conventional zero data retention. It is a commitment with a rough date, not a control you can procure today.

What is stated, and what is not settled

The claim	What is actually stated	What it does not settle
Roughly 25% cheaper	Cache reads fell 75%, to $0.25 per million tokens. Every other published rate is unchanged.	Your own saving, which is 0.75 times your cache-read share. Nothing here is a discount on input or output.
Vulnerability discovery is now allowed	Fable 5.1 “can now be used to discover software vulnerabilities, though not to develop exploits for them”.	Where the boundary sits in practice, how it is enforced, or what happens to a request that sits between the two.
The safeguards are robust	External testing by two organisations plus Gray Swan; Anthropic has “not found evidence of a critical-severity jailbreak”.	Whether one exists. The claim made is about what testing found, and it is the correct form of the claim.
Complete privacy with EFS	Data stored in cloud infrastructure controlled by the customer, equivalent to zero data retention.	Availability. It arrives for enterprise customers in phases “beginning later this fall”, so it is not procurable now.
Frontier cyber capability for defenders	Mythos 5.1 is available through trusted access, currently to “a set of US organizations”.	Access outside the United States, which Anthropic says it is coordinating with the US government to widen.

What to do about it