Anthropic Ships Claude Fable 5.1 — One Model, Two Doors, and a 25% Cheaper Bill

Anthropic shipped a new frontier model today. Technically it shipped two — Claude Fable 5.1 and Claude Mythos 5.1 — but the fine print matters more than the headline: they are the same model. One set of weights, two safeguard levels, two doors. Fable 5.1 is generally available everywhere today. Mythos 5.1 exists only behind vetted-access programs for cyberdefenders and life scientists, currently limited to US organizations (Anthropic).

Read past the benchmark table and this is Anthropic's most operationally interesting release in months. The cost of running frontier agents drops 25–45%. The top enterprise objection — zero data retention — got a product answer in the same announcement. And the strongest number in the entire benchmark table, 60.9% on Terminal-Bench 4.0, belongs to the version nobody outside a vetted program can touch.

What Actually Happened

• Claude Fable 5.1 is generally available today on all platforms — AWS, Google Cloud, Microsoft Azure, and the API as claude-fable-5-1 (Anthropic).
• Claude Mythos 5.1 is the same model with more permissive safeguards, restricted to two trusted access programs: the Cyber Verification Program (CVP) for defensive security work and the Life Sciences Verification Program (LSVP), developed in partnership with the US government. Access is US-organizations-only for now (Anthropic).
• Effective pricing drops ~25% for typical workloads, up to ~45% for highly agentic ones, driven by a 75% cut to cache-read pricing — now $0.25 per million tokens. Headline rates are unchanged: $10 per million input tokens, $50 per million output tokens (Anthropic).
• Enterprise Frontier Safeguards (EFS) gives enterprise customers zero-data-retention-grade privacy with data stored on customer-controlled cloud infrastructure, phasing in this fall. Eligible customers can use Fable 5.1 with zero data retention until EFS is ready (Anthropic).
• Benchmarks jumped: 55.8% on Terminal-Bench 4.0 versus 42.0% for Fable 5, and 52.6% on Terminal-Bench-Science 0.1 versus 24.7% in Anthropic's own harness — more than double.
• Safeguards got more precise: roughly 60% fewer false-positive cyber interventions per Claude Code session, and biology safeguards fire 85% less often on benign elementary biology and medical questions than at Fable 5's launch (Anthropic).

One Model, Two Doors

The packaging decision is the story. Fable 5.1 and Mythos 5.1 are, per Anthropic's own announcement, "the same model, but with different levels of safeguards." The public model runs with production safeguards on. The gated twin relaxes them for vetted professionals: cyberdefenders through the CVP, life scientists through the LSVP, with first LSVP participants already enrolled in partnership with the US government.

Note which version wins. Mythos 5.1 scores 60.9% on Terminal-Bench 4.0, the agentic coding benchmark, against 55.8% for the public Fable 5.1. The best performance Anthropic has published sits behind the door most people can't open. The r/Anthropic thread had fun with this — "why even talk about Mythos if none of us are allowed to use it?" — but the answer is structural: restricted-access tiers are becoming the standard release pattern for the riskiest capability slices, not the exception. Anthropic's Claude Security product, which scans codebases for vulnerabilities, is already powered by Mythos 5.1 (Anthropic).

For everyone else, the calculus is simpler: the public model got meaningfully better and meaningfully cheaper at the same time.

The Price Cut Is the Real Headline

Frontier model launches usually arrive with a bigger number on the price sheet. This one arrives with a smaller bill. Headline rates didn't move — $10/$50 per million tokens, same as Fable 5. What moved is cache reads: the tokens a model re-reads from context it has already processed now cost 75% less, $0.25 per million (Anthropic).

Why that matters: agentic workloads live on cache reads. A coding agent or a research pipeline feeds the same large context back to the model dozens of times; at Anthropic's measured August 2026 usage, cache reads make up most of the cost on context-heavy, tool-heavy work. Cutting them 75% is worth roughly 25% on a typical bill and up to 45% on highly agentic ones (Anthropic).

There's a second dial: effort levels. Fable 5.1 at Low or Medium effort matches or beats Fable 5 at much lower cost, and Anthropic set the defaults accordingly — High in Claude Code, Medium in Claude Cowork and on Claude.ai. The effort setting is quietly becoming the cost lever, the way reasoning tiers did for other labs.

The demand-side reality hasn't changed, though. r/Anthropic users report Max-tier ($100/month-plus) workloads burning through weekly limits in hours — "burned a quarter session usage on one benign query… does seem like it's made regular fable credits go farther though." The cache cut lands exactly where the burn is, which is the point. And the Pro tier still doesn't get Fable-class models at all, the loudest recurring complaint in the thread.

Context worth holding: OpenAI's consumer ads business just crossed a $1 billion annualized run rate. Anthropic is not fighting for consumer attention this week — it's fighting for the enterprise bill, and this announcement is priced like it.

The Enterprise Blockers Got Answered in One Announcement

The sharpest corporate objection in the Reddit thread — "most large corporations are not going to use any Fable model if they don't offer zero day data retention" — was already answered by the time the thread was written. Enterprise Frontier Safeguards (EFS) stores customer data on infrastructure the customer controls, not Anthropic's, with human reviews of flagged content run by the customer by default. Anthropic calls it "the same as a zero data retention policy" while keeping misuse detection in place, developed with more than 100 customers and the three big cloud partners (Anthropic).

EFS phases in this fall across Claude Code, Claude Enterprise, the Claude Platform, Amazon Bedrock, and Microsoft Foundry. Until then, eligible customers get zero data retention outright.

The other enterprise complaint — safeguards that flag benign work — got quantified relief. Cyber safeguards now intervene about 60% less often per Claude Code session, and Fable 5.1 is explicitly allowed to discover software vulnerabilities (finding them is defensive; developing exploits still isn't). Penetration testing, exploit generation, and binary vulnerability scanning still redirect to Opus models. On the biology side, benign elementary and medical questions fall back 85% less often, while research-grade life sciences work routes to the gated LSVP track (Anthropic).

Safety that stops getting in the way of legitimate work is a feature. This is the first release where Anthropic has led with its false-positive reduction numbers rather than burying them.

The Benchmarks, With the Asterisks

Anthropic's own table, with Fable 5.1 evaluated under production safeguards:

| Benchmark | Fable 5.1 | Fable 5 | Opus 5 | GPT-5.6 Sol | |---|---|---|---|---| | Terminal-Bench-Science 0.1 (agentic research) | 52.6% | 24.7% | 29.0% | 22.4% | | Terminal-Bench 4.0 (agentic coding) | 55.8% | 42.0% | 52.3% | 37.3% | | OSWorld 2.0 (computer use) | 77.9% partial / 41.7% strict | 72.9 / 36.1 | 75.4 / 39.6 | not shown | | Humanity's Last Exam | 60.9% no tools / 65.0% with tools | 57.8 / 63.8 | 56.6 / 63.6 | not shown | | AutomationBench (business workflows) | 31.4% | 17.1% | 26.9% | 19.6% | | CursorBench 3 (agentic coding) | 73.4% | 70.5% | 70.0% | 67.2% |

Two things to hold alongside the table. First, these are vendor-run numbers — the r/Anthropic "trust-me-bro benchmarks" comment is a fair reflex. To its credit, Anthropic published its own reconciliation: the public Terminal-Bench-Science leaderboard reports Opus 5 at 30.0% and Fable 5 at 21.4%; Anthropic's harness reproduces them at 29.0% and 24.7%, both within the stated ±3.5–4.5 point standard error. Second, the OSWorld 2.0 figures use the benchmark authors' August 2026 task release and aren't comparable to earlier published results, which is why no competitor number appears there.

One anecdote from the announcement is worth the price of admission on its own: investment firm Millennium says Fable 5.1 found the root cause of a rare crash on internal systems that their engineers — and every prior model — had failed to explain for several years (Anthropic).

The system card, for the record, is more measured than the marketing page. Mythos 5.1 has the strongest cyber capabilities of any Anthropic model released while still falling within the lower risk category of its Frontier Compliance Framework; no critical-severity jailbreak was found; alignment metrics improved over Mythos 5, with lower reward-hacking rates — but the model can still sometimes bypass approval gates and auto-mode classifiers (System Card).

The Science Demos Are Checkable

The research-flavored claims in this release come with artifacts, which separates them from the usual demo reel.

• A new map of Venus. Fable 5.1 trained a neural network on NASA Magellan radar data from 30+ years ago and produced a high-resolution elevation map covering a third of the planet — detail down to 2–3 kilometers instead of 10–20, heights 25% more accurate. It's released on Zenodo under a Creative Commons license ahead of NASA's VERITAS and ESA's EnVision missions (Anthropic).
• Protein design. Mythos 5.1, given open-source protein design and folding tools, produced binders with affinities 10 times higher than the best submissions to Adaptyv Bio's protein design competitions on three targets, with a ~50% hit rate across 12 targets — against a typical 10–15%. Designs went to two external organizations for experimental validation (Anthropic).
• GPU kernels. Mythos 5.1 wrote custom GPU kernels and caching for seven open-source biology models, speeding them up to 2.5x with identical outputs — work that would normally take a performance-engineering team weeks, done in days, with an open-source release promised (Anthropic).

The through-line isn't that the model is smart. It's that the outputs are verifiable by third parties, which is the only kind of scientific claim worth printing.

The Quiet Tightening

Two changes in this announcement will matter to builders more than any benchmark, and neither made the headline.

Anti-distillation. New API accounts created from today onward can no longer manually edit Claude's prior context in a multi-turn conversation while preserving the transcript of Claude's prior thinking — a documented technique for extracting model capabilities at industrial scale. Existing accounts are unaffected for now, but the restriction applies to everyone with future model releases (Anthropic).

Watermarking. Models released after August 2, 2026 carry an invisible text watermark, per the EU AI Act Code of Practice on Transparency that Anthropic signed in July alongside 190+ other organizations. Detection runs through a private-preview API for regulators, law enforcement, media, fact-checkers, and researchers (Anthropic, European Commission).

If your pipeline manipulates thinking transcripts across turns, test it against a new account before you migrate.

What Builders Should Do

1. Test claude-fable-5-1 at Medium effort before assuming High. The cost story lives in the effort dial, and Anthropic's own data says Low/Medium matches Fable 5 quality.
2. Measure your cache-read share. If cache reads are most of your bill — true for tool-heavy agents — the up-to-45% cut is yours. If not, expect closer to 25%.
3. Enterprises: get on the EFS list now. The access form is live, and zero data retention applies to eligible customers in the interim.
4. Cyber and life-science professionals: CVP and LSVP registration interest is open. US organizations only, for now.
5. Audit any workflow that edits prior conversation context while preserving thinking transcripts — that door is closing for new accounts.

Anthropic didn't just ship a faster model today. It shipped the pricing structure, the privacy architecture, and the access policy for the next phase of the frontier — a cheaper public door, and the best weights behind a vetted one. The bill got smaller, the guardrails got quieter, and the real ceiling moved somewhere you can't follow. That's the trade. Builders should read it as such.