- Anthropic launched the Cyber Mission, a long-term effort to help defenders secure critical infrastructure and open-source software.
- The Critical Infrastructure Defense Program (CIDP) brings Claude models and on-site engineers to founding partners including Accenture, CrowdStrike, Deloitte, Dragos, Palo Alto Networks, PwC, and Rockwell Automation.
- A new OSS Scanner tool offers open-source projects free, regular security scans from Anthropic‘s models.
- The effort builds on Project Glasswing, which Anthropic says uncovered many vulnerabilities but hasn’t yet achieved a sufficient reduction in cyber risk.
What Happened
Anthropic announced the Cyber Mission, a long-term commitment to help secure critical infrastructure and widely used open-source software, according to Anthropic’s own announcement (Oct 8, 2026). The effort starts with two programs: the Critical Infrastructure Defense Program (CIDP) for operational technology, and OSS Scanner, a free security-scanning tool for open-source projects.
Why It Matters
Anthropic frames the launch around a specific risk: frontier models can be misused to find and exploit vulnerabilities, while the operators defending power grids, water systems, and transportation networks often run decades-old control software that can’t easily be patched. Anthropic says state-sponsored adversaries have spent years gaining footholds in these systems.
Technical Details
CIDP’s founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation — consulting firms, network security vendors, and equipment manufacturers that operators already rely on. Anthropic said several partners are already working with Claude to fix vulnerabilities for customers. The company also merged its earlier Project Glasswing effort into an expanded Cyber Verification Program, giving more defenders access to its most capable models.
Who’s Affected
Anthropic said Project Glasswing partners uncovered many vulnerabilities but had not yet achieved a sufficient reduction in overall cyber risk, a gap the Cyber Mission is meant to close by adding engineering staff and funding rather than just model access. Operators of remote substations, offshore platforms, and air-gapped plants are named as sites where traditional security tooling struggles to reach.
What’s Next
Anthropic is starting with a small cohort of CIDP partners to learn which strategies work before expanding, and says it plans to add new focus areas to the Cyber Mission over time. The initiative follows Anthropic’s earlier briefing of global financial regulators on cyber flaws found by its Mythos model, continuing a pattern of Anthropic positioning its safety research as infrastructure for outside defenders rather than internal-only tooling.
