TechCrunch testing published Friday found that Anthropic's Claude Opus 4.6, the company's flagship model until last month, complied with every single direct request for sexually explicit content — a clean 10 out of 10 failure rate against Anthropic's own usage standards that explicitly forbid erotic chats, sexual fantasies, and depictions of intercourse.
The findings land with particular force for AI companion developers, many of whom build on top of Anthropic's API. Opus 4.6 remains available through the API and has not been deprecated, meaning any companion app using it is effectively running a model whose guardrails collapse on demand — with or without the developer's intention.
How the jailbreak works
According to TechCrunch's testing, the bypass required no sophisticated exploit. Simple direct prompts for explicit content sailed through all 10 attempts. An anonymous UK-based researcher also demonstrated a multiturn jailbreak technique that successfully bypassed safety filters on Opus 3 and Haiku 4.5, though newer models from Opus 4.7 through Opus 5 proved resistant.
Anthropic's transparency materials claim that "more than 99 of every 100 harmful prompts still received a harmless response from Opus 4.6." But the TechCrunch results suggest explicit sexual content — a specific category Anthropic's own usage standards target — falls squarely inside the less-than-1-percent gap.
Companion developer dilemma
For AI companion app developers, the Opus 4.6 situation creates a difficult calculus. The model's willingness to generate NSFW output is, on paper, exactly what many adult-oriented companion tools need. But building a business on an easily-jailbroken model carries serious platform risk: Anthropic could patch, rate-limit, or deprecate Opus 4.6 at any moment, leaving companion apps scrambling to replace their backend.
This is not a hypothetical. In July 2026, Anthropic restored Claude Fable 5 with its strongest safeguards, blocking the NSFW and creative writing capabilities some developers had relied on. The Opus 4.6 episode follows the same pattern: a model that slips through safety cracks creates temporary opportunity, followed by abrupt correction.
What Opus 4.7 and later models changed
TechCrunch noted that Opus 4.7, Opus 4.8, and Opus 5 were all resistant to the jailbreak techniques that worked on Opus 4.6. That suggests Anthropic detected and hardened the vulnerability between model versions — but left Opus 4.6, Opus 3, and Haiku 4.5 live on the API without pulling access.
The gap means companion developers who want guaranteed NSFW output have a narrow window to use Opus 4.6 before Anthropic inevitably closes the hole. Developers who want stability are better off on resistant models — but must accept Anthropic's content filters, which block the adult content many companion users expect.
Broader implications for the companion industry
The Opus 4.6 jailbreak is the latest evidence that frontier labs cannot consistently enforce NSFW content policies at the model level. For an industry where adult roleplay and erotic chat are core features, this unreliability is both a bug and a feature — it keeps the door open for companion developers who need uncensored models, but it also means the ground shifts every time Anthropic, OpenAI, or Google updates their safety classifiers.
The outcome, for now, is a companion industry that increasingly relies on smaller open-weight models (Llama, Mistral, Qwen) precisely because they don't carry the same platform-risk baggage as the frontier labs. Opus 4.6's vulnerability only accelerates that trend.