Claude Opus 5 Launch

Anthropic launched Claude Opus 5 on July 24, 2026 as a model designed to land 'close to the frontier intelligence of Claude Fable 5 at half the price' ^[1]. The pricing is literal: Opus 5 costs $5 per million input tokens and $25 per million output tokens - unchanged from Opus 4.8 and exactly half of Fable 5's input rate, with a Fast mode available at $10/$50 that runs roughly 2.5x faster ^[2]. The benchmark gap is narrower than the price gap would suggest: on Frontier-Bench v0.1, Opus 5 scored 43.3% versus Fable 5's 33.7% and GPT-5.6 Sol's 34.4%, more than doubling Opus 4.8's 18.7% ^[2]. On ARC-AGI-3 it hit 30.2% against GPT-5.6 Sol's 7.8% ^[2], and on the GDPval-AA v2 knowledge-work Elo it scored 1,861 versus Fable 5's 1,747 ^[2]. Opus 5 does trail on some coding-specific tests - SWE-bench Pro came in at 79.2% against Fable 5's 80.0% ^[2]- but on CursorBench it landed within 0.5% of Fable 5's peak score at maximum effort while costing half as much, and it beat Fable 5's OSWorld 2.0 computer-use result at roughly a third of the cost ^[2]. That price-to-performance math is exactly what fueled the loudest community reaction: hands-on testers running practical agentic-workflow comparisons rather than just citing the published charts, and a recurring question about what Fable 5 is still for now that a cheaper sibling nearly matches it.

The most concrete safety claim in Anthropic's launch materials is about prompt injection - the attack pattern where malicious instructions hidden in a webpage hijack an AI agent's browsing session. In testing run through Claude Cowork across 129 environments, attack success with no safeguards applied fell from 31.5% on Opus 4.8 to 3.70% on Opus 5, and dropped to 0% once Auto Mode was enabled ^[3]. On the separate Gray Swan indirect prompt injection benchmark, the odds of an attacker succeeding within 15 attempts fell from 5.5% to 2.0%, and within a single attempt from 0.5% to 0.2% ^[4]. One outlet framed this as Opus 5 potentially solving 'the biggest security flaw haunting AI agents,' noting the gains come from layered defenses combining input scanning with action-blocking rather than a single fix, against a backdrop where OpenAI has said prompt injection 'may never be fully solved' ^[3]. The improvement is not universal, though: Anthropic has deliberately kept Opus 5 behind its own Mythos 5 model on cybersecurity exploitation and other 'risky, dual-use capabilities,' gating restricted use cases through a Cyber Verification Program ^[1][5].

Behind the pricing story is a specific business pressure: enterprise customers pushing back on rising AI bills ^[6]. Anthropic's response was a new effort toggle - low, medium, or high - that lets a customer trade capability for cost on a per-request basis rather than being locked into one price point ^[6][7]. Combined with the standard/Fast mode split ($5/$25 versus $10/$50 for roughly 2.5x the speed) ^[2], it gives enterprise buyers two independent dials - effort and speed - instead of a single model tier. This shipped alongside enterprise-first deployment moves: Opus 5 launched simultaneously on Amazon Bedrock and Claude Platform on AWS with zero data retention by default ^[8], and rolled out to GitHub Copilot for Pro+, Max, Business, and Enterprise users across VS Code, Visual Studio, GitHub.com, and JetBrains, with enterprise admins required to opt in ^[9]. Opus 5 is also Anthropic's fourth model release in under two months, following Mythos 5, Fable 5, and Sonnet 5 in June 2026 ^[6]- a cadence that reads as much like a response to competitive pressure from OpenAI's GPT-5.6 Sol, released just two weeks earlier, as it does an enterprise-cost fix ^[10].

Not everyone is reading Opus 5's launch at face value. AI analyst Zvi Mowshowitz described it as a deliberate middle-ground release: 'Claude Opus 5 is trying to be the best of both worlds' ^[11]- near-Fable-5 performance at half the price, while intentionally withheld from the more dangerous reasoning capabilities Anthropic reserves for Mythos 5. Mowshowitz, citing the commentator j⧉nus, pushed back specifically on how Anthropic frames its safety benchmark improvements: 'Optimizing against metrics is practically unavoidable, but ontological confusion between benchmark scores and the North Star of alignment is not' ^[11]. As already noted, Anthropic kept Opus 5 a step behind Mythos 5 on cybersecurity and dual-use tasks ^[1][5], which lines up with a wider community suspicion, visible in discussion threads dissecting Anthropic's benchmark charts, that the gap between Opus 5 and higher tiers is being managed for product-differentiation reasons as much as safety ones. The tension is less about whether Opus 5's numbers are real and more about whether strong scores on prompt-injection and benchmark suites are being equated with genuine alignment progress - a distinction Mowshowitz argues Anthropic's own framing blurs ^[11].