On Friday, Anthropic launched Opus 5, the latest iteration of its heavyweight model. Arriving just two months after Opus 4.8 and following the June releases of Mythos 5, Fable 5, and Sonnet 5, Opus 5 rounds out the new generation — only the lightweight Haiku waits for an upgrade.
While smaller than the flagship Fable 5, Opus 5 is significantly cheaper and noticeably less restrictive. Opus 5 is designed to work on programming tasks for much longer without constant human input.
Opus 5 is designed to work on programming tasks for much longer without constant human input.
Benchmarks at bargain prices
Priced at $5 per million input tokens and $25 per million output tokens, Opus 5 upends the cost-to-performance ratio for agentic tasks. On coding and knowledge work evaluations like Frontier-Bench and GDPval-AA, Opus 5 establishes a new state of the art.
In the OSWorld 2.0 computer use benchmark, it outperforms every other model at any given cost, surpassing Fable 5’s best result at just over a third of the price. On ARC-AGI 3, an evaluation where the model has to solve novel problems, its score is three times as high as the next best model.
Because Opus 5 is less expensive to run, teams can afford to let it work through larger coding tasks. That also means thinking differently about security.
Anthropic writes in the company announcement that Opus 5 is “much stronger at verifying its work and iterating carefully until it succeeds.” During benchmark testing, the model was given an incomplete prompt and intentionally prevented from viewing a drawing of a machine part. Instead of giving up, it wrote its own computer vision pipeline to reconstruct the part from the image data.
Because Opus 5 is less expensive to run, teams can afford to let it work through larger coding tasks. That also means thinking differently about security, which is one reason microVMs are getting more attention. Unlike long-running containers, they give platform teams an isolated environment they can tear down as soon as a task is finished.
Security for unsupervised agents
When a model is working across multiple systems without constant human oversight, access has to be temporary and easy to revoke. That’s why more attention is shifting to short-lived, just-in-time credentials, similar to the delegated authentication model 1Password is developing for Claude.
There’s a catch to giving an AI relentless persistence: it doesn’t know when to quit. Your standard API logs won’t flag that behavior in time. Teams will have to build smarter telemetry that actually understands the context of the workflow. You need a semantic circuit breaker to pull the plug before the model burns through your compute budget.
Controlling runaway token spend
Opus 5 drops the per-token price tag compared to Fable 5, but autonomous coding can still get expensive fast. An agent working through background loops for hours will churn through millions of tokens before handing off a PR. For platform teams, managing spend by the session becomes the new operational requirement.
To keep those background jobs from crashing on edge cases, Anthropic is launching Automatic Fallbacks in beta. If a prompt trips a safety classifier on Opus 5, the API silently reroutes the task to Opus 4.8 instead of throwing a hard error and killing the entire pipeline.
Opus 5 also inherits its predecessor’s zero-retention posture, bypassing the 30-day data logging mandatory for Fable and Mythos.
To understand where Anthropic expects these environment harnesses to operate, it helps to look at how they are artificially restricting the model. The company is threading a careful needle between short-horizon capability and long-horizon safety.
If a prompt trips a safety classifier on Opus 5, the API silently reroutes the task to Opus 4.8 instead of throwing a hard error and killing the entire pipeline.
Biological capability, careful limits
Anthropic spokesperson tells The New Stack, Opus 5 is a “meaningful improvement over Opus 4.8 on biology tasks, making it our most capable generally available model for scientific research.” It scores 10.2 percentage points higher than Opus 4.8 on internal organic chemistry benchmarks (like inferring molecular structures from spectroscopy data) and 7.7 percentage points higher in predicting how protein sequence variations determine function.
However, Anthropic’s testing revealed “significant limitations on long-running autonomous research tasks,” which they view as carrying the highest potential risk. As a result, Opus 5 retains a similar portfolio of biological safeguards to Opus 4.8. While biology-related requests blocked on Fable 5 will now route to Opus 5 instead of 4.8, the uncapped Mythos 5 remains the stronger model for long-horizon, open-ended work like autonomous drug design campaigns.
Opus 5 can review source code for defensive security work. Anthropic says those safeguards should activate far less often than they do with Fable 5 — about 85% less, according to the company.
Clearly, the models are improving quickly, but the bigger challenge now is making sure the platforms they’re running on can keep up.
Major AI model releases: a timeline
YOUTUBE.COM/THENEWSTACK
Tech moves fast, don’t miss an episode. Subscribe to our YouTube
channel to stream all our podcasts, interviews, demos, and more.
