Our org got allow listed by Anthropic's Cyber Verficiation Program, but we are still getting downgraded to Opus 4.8 when we want to check our own code for security problems.

It is pretty annoying ... and it looks like other people are able to either circumvent this or are using different LLMs that are not like that.

What are your experiences with Anthropic's Cyber Verficiation Program? Any recommendations to check our own code in a rather automatic fashion?