Anthropic announced the launch of the Anthropic Cyber Mission, a long-term commitment to securing the systems that society depends on. The initiative is designed to give defenders tools, research, and resources to protect their software and infrastructure, beginning with two focus areas: critical infrastructure and open-source software.
For critical infrastructure, the company introduced the Critical Infrastructure Defense Program (CIDP), which combines frontier Claude models, on-site engineers, and threat research to support the defenders of operational technology—the controllers, control software, and industrial networks behind power grids, water systems, and transportation networks. Founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. Anthropic notes that several partners are already using Claude to find and fix vulnerabilities.
For open-source software, Anthropic launched OSS Scanner, an opt-in service inspired by Google's OSS-Fuzz. Enrolled projects receive periodic scans from Anthropic's most capable models free of charge. Each report includes a proof of concept, an explanation, and a suggested fix where available. The reports are model-generated and sent without human review, which speeds delivery but may include inaccuracies such as incorrect severity ratings. Anthropic expects a true-positive rate above 90% and says it will work to improve accuracy over time.
The Cyber Mission builds on lessons from Project Glasswing, which scanned hundreds of widely used open-source projects and privately reported findings to maintainers. Anthropic said that while many vulnerabilities were uncovered, cyber risk has not been reduced sufficiently, and that verifying, prioritizing, and fixing findings remains difficult. Earlier this week, Project Glasswing was merged into an expanded Cyber Verification Program, giving more defenders access to Anthropic's most capable models.
Anthropic also highlighted its support for open-source foundations and organizations, including the Python Software Foundation, Alpha-Omega and OpenSSF through the Linux Foundation, the Apache Software Foundation, as well as Akrites and Gold Eagle. The Defender Advantage Fund (0xDAF), launched in August, supports pilot programs and keeps OSS Scanner free. Maintainers can also apply to Claude for Open Source and the Cyber Verification Program.
The company acknowledged that highly cyber-capable AI models are already widely available to attackers, while defensive tools have not reached enough defenders. Anthropic forecasts that within two years AI will favor defense, making it easier to catch bugs before shipping and to write secure software from scratch, but warns that in the near term the cost of exploiting vulnerabilities has dropped while fixing them remains slow and human-dependent. Success, the company says, means critical infrastructure keeps running under attack with fewer exploitable paths and faster recovery.