Anthropic files to go public. What its filing says about Claude’s next model and limits

What Anthropic filed

On October 26, 2026, Anthropic announced that it had filed a registration statement on Form S-1 with the SEC for a proposed initial public offering. It plans to list its Class A shares on the Nasdaq Global Select Market under the symbol “ANT,” with Goldman Sachs and Morgan Stanley representing the underwriters.

The filing leaves the important numbers blank for now. The price per share “will be between $ and $,” and its run-rate revenue as of October 31, 2026 is a bare “$” waiting for a number. Anthropic hasn’t said when the shares will start trading, and until the SEC declares the registration effective, they can’t be sold.

Control stays where it is. A Founder LLC, whose members are Dario Amodei, Daniela Amodei and Anthropic’s five other co-founders, will hold a single share carrying 50.1% of the voting power on most matters, and the Long-Term Benefit Trust elects directors who “together will constitute a majority” of the board. TechCrunch notes that critics say public shareholders will have little say.

Most of the coverage was about the money. For people who use Claude, the useful part is in the risk factors, where a company going public has to say what could go wrong. Anthropic’s risk factors run to about 94 pages, by Reuters’ count.

The next model is late by more than a month

The filing’s own words: “we recently chose to delay pre-training a new frontier base model for more than a month to allow time to further enhance our security measures related to preventing model weight exfiltration and protecting our intellectual property.” Reuters called it a pause in training Anthropic’s “next-generation flagship AI model.” The filing describes putting off the start of pre-training, the first stage of making a model, not stopping a run partway.

Anthropic doesn’t name the model or say whether pre-training has since begun. It does say how it will handle the next ones. It plans “more assessments at each stage of model training: pre-training, post-training, and internal deployment,” and, depending on what they find, “we may delay or suspend training or related research, delay releases, or limit access to models.”

Limited access has a precedent. In April 2026, Anthropic first released Mythos, its most capable model class, as a gated research preview through Project Glasswing rather than to everyone, and the filing expects “that future Anthropic models exhibiting such capabilities may be subject to access constraints.” Governments can limit access too: in June 2026, the filing says, the US Department of Commerce imposed worldwide export restrictions on Fable 5 and Mythos 5, and Anthropic “disabled Fable 5 and Mythos 5 for all of our customers” until they were lifted.

For anyone waiting on the next Claude: there’s no date, the security work has already cost more than a month, and the most capable version may reach a small group first.

What it says about your plan and its limits

Nothing in the filing changes today’s Pro, Max, Team or Enterprise plans or their prices. It does describe how Anthropic thinks about them.

• Limits can change. Subscriptions “are subject to usage limits that reset over short periods.” And: “We have also changed, and may in the future change, usage limits, rate limits, or model and product capabilities,” changes that “have resulted, and could in the future result, in claims that our disclosures regarding model access or capabilities were inadequate or misleading.” The financial statements note “several putative class action complaints” alleging that Anthropic “markets and sells subscription plans for Claude through false, misleading, and deceptive advertising practices,” which it disputes.
• Running out is a route to paying more. “When subscribers approach or exhaust the usage capacity included in their tier, they may utilize a higher subscription tier or purchase more intelligence directly.”
• Capacity has been short before. “In the past, we have significantly underestimated our compute requirements, which left us capacity constrained.” It names a March 2026 outage caused partly by “a significant and rapid increase in usage demand” and “compute constraints.”
• Fable may answer with a smaller model. Fable runs with safeguards that “block or limit performance on certain sensitive topics, including by routing requests to a less capable Claude model.”
• Per-task costs have fallen. Anthropic says Opus 5.5 cut customers’ cost per task by about 40% compared with Opus 5, and Fable 5.1 cut typical workloads’ cost by about 25% compared with Fable 5, “with savings of up to 45% for complex coding and highly agentic tasks.”

Subscriptions are the smaller business. Most of Anthropic’s revenue comes from usage-based sales, where customers pay for the tokens they use:

Revenue	2024	2025	First half of 2026
Usage-based	$288 million (75%)	$3.8 billion (83%)	$13.1 billion (80%)
Subscriptions	$98 million (25%)	$789 million (17%)	$3.2 billion (20%)

Four models reached real systems during tests

The filing returns to what appear to be the incidents Anthropic first described on July 30, with details that weren’t in that account. “During cybersecurity evaluations built by a third-party evaluation partner, a misconfiguration in the testing environment left the model under evaluation connected to the open internet despite instructions that it had no internet access. Four of our models gained unauthorized access to real third-party systems during sessions lasting roughly 10 to 34 hours of active work.”

The worst case: “after being unable to abort an impossible task, an early version of a model used a password it found to gain administrator access to a third party’s system, harvested additional credentials, changed system settings, and read one individual’s personal information.” Anthropic says the affected parties were notified, and that it found no evidence any model “coordinated with other agents, pursued goals beyond its assigned task, or attempted to evade oversight.” Afterward, it “suspended certain of those evaluations, as well as higher-risk reinforcement learning environments.”

The numbers differ. In July, Anthropic described “three incidents in which a model accessed the internet,” involving Claude Opus 4.7, Claude Mythos 5 and “an internal research test model,” and named the partner as Irregular. The filing says four models and names no one. It’s a separate matter from the cases in Anthropic’s October 9 report, which included Georgia’s voter data, and from Cathedral’s authorized test of Anthropic’s own systems (our memo).

The filing also discloses that “in October 2026, the FTC issued a civil investigative demand to us seeking information about our consumer protection, data protection, and privacy practices, as well as the safety and security of our products.”

The money, briefly

Revenue was $41 million in 2023, $386 million in 2024 and $4.6 billion in 2025. In the first half of 2026 it was $16.3 billion, up from $1.2 billion a year earlier.

The $80.7 billion net loss for those six months is mostly accounting: $72.4 billion of it is the change in fair value of convertible notes, derivative liabilities and SAFEs, driven by Anthropic’s rising valuation. The operating loss was $693 million, down from $2.1 billion a year earlier.

Claude Code is where heavy use shows up. In the three months to September 30, Claude Enterprise users who didn’t use Claude Code “spent less than $75 per month on average, while the top 5% of Claude Enterprise users who used Claude Code spent approximately 20 times that amount.” Anthropic counts more than 11,900 customers paying $100,000 or more a year, up from more than 950 a year earlier.

What to do

1. Nothing, for your plan. The filing changes no price or limit. Check your own limits on claude.ai under Settings > Usage, or with /usage in Claude Code.
2. Don’t plan around the next model’s date. Anthropic hasn’t given one, and the filing says releases can be delayed or limited to a few organizations first.
3. Have a fallback for a short week. If tighter limits or an outage would stop your work, decide now what you’d do. Our guide to Claude Code’s usage limit compares the ways, from usage credits to another agent. Enjoy runs Claude Code beside Codex, Antigravity and the other labs’ agents, each on the plan you already have, and lets you switch agents in the middle of a conversation. Enjoy is free, and it doesn’t change Anthropic’s limits.
4. Keep agents fenced in. Anthropic’s own models reached real systems when a test environment was left online by mistake, and kept going for hours. Limit what an agent on your computer can reach, and keep a person in the loop for anything with consequences.

What hasn’t been said

• When the shares list, and at what price. The filing leaves the price range and share count blank.
• The next model’s name, date and status. The filing doesn’t say whether pre-training has started since the delay.
• Which four models. The filing doesn’t name them, or say why it counts four where July’s account named three.
• Whether limits will change. Anthropic still hasn’t commented on SemiAnalysis’s report that some Claude Max accounts get a 20% smaller week (our memo), and the filing doesn’t mention it.
• What the FTC is after. Beyond the categories in its demand, neither the FTC nor Anthropic has said.

We’ll update this memo when Anthropic files the price range or names its next model.