EMERGING TECH RESEARCHMythos: The Model Too Institutional Research Group Valuable to Sell Harrison RolfesSenior Research Analyst,Late-Stage Researchharrison.rolfes@pitchbook.com Dimitri ZabelinSenior Research Analyst,AI & Cybersecuritydimitri.zabelin@pitchbook.com When withholding is the product PitchBook is a Morningstar company providing the most comprehensive, mostaccurate, and hard-to-find data for professionals doing business in the private markets. pbinstitutionalresearch@pitchbook.com Published on April 22, 2026 Key takeaways Contents Note: PitchBook uses afive-dimensional scoring framework (AI Business Qualityor AIBQ)to evaluate frontier AI companies and determine long-term enterprisevalue creation. Four catalysts, one ruling that matters most.The D.C. Circuit merits hearing swingsthe AIBQ composite for Anthropic from 6.0 (bear) to 8.7 (bull) on a single legaloutcome. The breach investigation, the S-1 filing, and competing lab parity are theother three catalysts. How Anthropic navigates the next six months determineswhether the $380 billion valuation is a floor or a ceiling. AIBQ composite moves from 7.3 to 7.7.Moat durability hits 10 for the first time afterGoogle, Microsoft, and Amazon voluntarily accepted Anthropic as a gatekeeperto capability they could not replicate internally. Capital efficiency moves to 8 onconfirmed $30 billion ARR. Governance optionality, which held at 5 while the Pentagonand Treasury contradict each other, is the binding constraint and the only score thatmoves the composite more than one point in either direction. The selloff mispriced the sector.Glasswing split cybersecurity into insiders andoutsiders, and the market priced them as a single trade. CrowdStrike and Palo Alto sitinside the consortium with six to 12 months of lead time on Mythos-class vulnerabilityintelligence. Fortinet, which carries the same wide-moat rating, was not invited.Separately, Glasswing solves proliferation but not monitoring; the interpretability toolsthat caught Mythos strategizing in its activations while writing different content in itsvisible reasoning trace are not available to anyone outside Anthropic. The real multiple is 25x, not 12.7x.At $30 billion ARR, the forward multiple lookscompressed. If we apply the 2:1 booked-revenue ratio, then recognized 2026 revenuelands near $15 billion, which reprices the company at 25x, recognized againstcomparable multiples of 55x (Palantir), 18x (CrowdStrike), and 15x (Datadog). The S-1will force this conversation. The market has not had it yet. Nonrelease is now an industry standard.OpenAI shipped GPT-5.4-Cyber oneweek after Glasswing, backed by $10 million in credits and open to thousands ofverified defenders.¹Anthropic restricted access to 40 organizations and framed thenonrelease as a national security event. OpenAI opened it to thousands and called itdemocratization. Both labs placed opposite bets on what “responsible access” means,and the competitive question has shifted from who builds the best model to whocontrols the distribution most credibly. The breach arrived on day zero.Unauthorized users accessed Mythos through a third-party vendor environment on the same day Glasswing launched, using URL patternguessing and shared contractor credentials.²Anthropic confirmed the investigation onApril 22.³The company that built a model capable of finding 27-year-old vulnerabilitiesin the world’s most secure operating systems had its own access controls bypassedbefore the consortium finished onboarding its first partners. Mythos impact: what comes next Forward-looking catalyst timeline with AIBQ score impact ranges, April 2026 to October 2027 Bear case (D.C. upheld + breach widens + parityaccelerates):Composite 6.0. $/quality-point entersOpenAI territory. October timeline faces material obstacle. Bull case (all four resolve favorably):Composite 8.5+.$/quality-point narrows toward Databricks. IPO clearsat $380B+. The recent breach adds a fourth catalyst to the three we were already watching. TheD.C. Circuit merits hearing on the Pentagon supply chain designation carries the mostweight. The governance optionality score, the composite, the IPO timeline, and theinstitutional investor narrative all move on this single ruling. Alongside it, Anthropic is now managing an active investigation into unauthorizedaccess through a third-party vendor environment.4A contained outcome with nomaterial impact leaves the score unchanged. Broader access confirmed througha compromised vendor chain would pressure governance optionality further andintroduce a new obstacle to the S-1 timeline. We are tracking the investigation asit develops. The S-1 itself, reportedly targeting October, will answer the question the market hasbeen circling since April 7: how Anthropic classifies the $100 million in Glasswingcredits and whether consortium fees show up as recurring revenue. The differencebetween “gatekeeper with a cost center” and “platform with embedded distrib