AI NewsOct 9October 9, 20267 min read

Anthropic Launches Cyber Mission and Free OSS Scanner

The initiative supports critical-infrastructure defenders and offers opt-in vulnerability scans, but maintainers receive model-generated findings without human review.

Listen

AI narration

10:50

AI SummaryGenerated from this article

Anthropic launched two cybersecurity programs in October 2026: a Critical Infrastructure Defense Program providing frontier Claude models and engineers to protect power grids and water systems through 11 founding partners, and OSS Scanner, a free vulnerability-scanning service for open-source projects. Both aim to accelerate security work, though OSS Scanner delivers unreviewed model-generated findings that maintainers must validate themselves. Early evaluation found 88% of tested critical and high-severity findings met disclosure standards, but this represents acceptance under specific criteria for a limited sample, not a general false-positive rate, and maintainers must still assess exploitability within their threat models.

Critical-infrastructure defenders will receive frontier models, on-site engineers and threat research through Anthropic’s new cybersecurity program. Eligible open-source projects can also apply for a free vulnerability scanner, though maintainers will need to validate its findings themselves.

The Anthropic Cyber Mission, announced on October 8, 2026, is a long-term effort beginning with operational technology behind power grids, water systems and transportation networks, alongside protection for government systems. Its open-source component, OSS Scanner, offers recurring security scans using the company’s strongest models.

The expansion takes Anthropic’s work beyond earlier research demonstrations by establishing ways to deliver capabilities to security providers and software maintainers. Access differs between the two programs: OSS Scanner has a stated application process, while the infrastructure program begins with selected providers. Important operational and safe-deployment details remain unspecified.

Infrastructure Support Starts With Trusted Providers

The Critical Infrastructure Defense Program, or CIDP, combines frontier Claude models with Anthropic engineering support and threat research. Initially, it will work through organizations that already build, secure or support essential systems. It is not an unrestricted service that any infrastructure operator can immediately activate.

Anthropic names 11 founding partners: Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC and Rockwell Automation. The group spans consultancies, security companies and equipment manufacturers, reflecting the different organizations involved in protecting industrial environments.

Several partners are already using Claude to fix vulnerabilities and help customers do the same, according to the company. This is a vendor-reported description of work underway; Anthropic has not published an assessment of how much risk the program has reduced.

Operational technology presents different constraints from ordinary application development. Controllers, industrial networks and control software can remain in service for decades. Anthropic’s announcement notes that systems often cannot be taken offline for patching, equipment is proprietary, and a mistaken change can disrupt a plant.

A proposed repair must fit the equipment, operating conditions and acceptable downtime. Involving established providers acknowledges that model capability alone does not supply the operational knowledge needed to move from finding a weakness to fixing it.

Let’s work together

We’re open to thoughtful collaborations with teams building in AI. Explore the ways we can work together.

See collaboration details

OpenAI’s Navier-Stokes Proof Faces Translation Critique

Oct 9 • 8 min

Anthropic Bans Model Abuse and Sets Hardware Safety Rules

Oct 9 • 7 min

OpenAI Speeds Up Codex Steering for Active Tasks

Oct 9 • 5 min

Goodfire Says AI-Agent Monitors Cut Safety Costs

Early Validation Helps, but Does Not Set a Reliability Rate

In an early evaluation of OSS Scanner’s output, Anthropic says expert penetration testers reviewed 97 critical- and high-severity findings across 48 projects. Of those, 85, or 88%, met the bar for its coordinated vulnerability disclosure process.

Of the remaining findings, 11 were real issues that duplicated known problems or other findings from the scan. One was invalid.

The 88% figure is an acceptance rate under Anthropic’s disclosure criteria for that evaluated group. It does not measure the scanner’s overall precision, and the single invalid report does not establish a general false-positive rate. The evaluation covered an early version, a specific severity range and a limited collection of findings. Anthropic reported the results; they are not an independent assessment of the service across all eligible projects.

The company also acknowledges feedback that severity ratings can be inflated or that the scanner can misunderstand a project’s threat model. Even when the underlying code defect is real, maintainers still need to determine whether an issue is reachable, what an attacker would require, and how urgently it should be fixed.

Detailed unreviewed reports may be useful to a well-resourced project while adding work for a small volunteer team. The relevant measure is how much verified remediation the service enables after accounting for the time spent checking its findings.

The Earlier Water-Plant Study Was a Simulation

Anthropic’s critical-infrastructure defense research, published on January 8, 2026, was separate from the new infrastructure program.

That work involved Pacific Northwest National Laboratory, or PNNL, using Claude to emulate attacks against a high-fidelity simulation of a water treatment plant. The experiment took place in summer 2025 and used Claude Sonnet 4.

PNNL researchers built a software scaffold that supplied tools and translated natural-language requests into attack sequences. The configured research system operated in a controlled environment. It did not demonstrate an unmodified chatbot safely managing a live utility.

According to Anthropic’s account, PNNL estimated that attack reconstruction took three hours rather than multiple weeks. That result concerns the specific adversary-emulation task and setup. It does not establish that infrastructure vulnerabilities can generally be found, validated and repaired on the same timescale.

The research supplied a proof of concept for accelerating defensive testing. CIDP supplies a delivery arrangement involving security providers, model access, engineers and threat research. That is a consequential difference, but the earlier simulation cannot establish that the newly announced program is already safe or effective across production infrastructure.

Access Is Becoming Clearer Than Deployment Assurance

The announcements establish what Anthropic intends to deliver, though neither provides a complete operational specification.

For CIDP, the published material leaves questions about admission criteria, supported regions, service limits, precise model access and how engineering support will be allocated. It also does not establish that participation or all associated services are free. The explicit no-cost offer applies to OSS Scanner.

The infrastructure announcement also does not explain a common process for authorizing tests, isolating risky model actions, validating proposed fixes or reversing a change that affects operations. These are unanswered implementation questions, not evidence that participating providers lack their own controls.

OSS Scanner has clearer enrollment guidance and a more explicit output format. Maintainers still need to understand the scope and frequency of scans, how reports are handled, and what support exists when a finding or proposed repair is disputed. Without human triage, a project’s capacity to investigate is especially important.

Anthropic identifies the broader problem in its announcement: finding vulnerabilities has become easier, while verification, prioritization and repair remain difficult. The Cyber Mission’s strongest feature is its attention to delivery as well as discovery, pairing infrastructure support with an opt-in reporting service for open source.

Success should be judged by the resulting repairs. Infrastructure defenders need validated remediation that preserves safe operation; maintainers need actionable security improvements without an unmanageable review burden. More findings would demonstrate scanning activity. Fewer unresolved, exploitable weaknesses would demonstrate defensive value.

Anthropic Launches Cyber Mission and Free OSS Scanner

Infrastructure Support Starts With Trusted Providers

Tags

Read next

Let’s work together

Related articles

OpenAI’s Navier-Stokes Proof Faces Translation Critique

Anthropic Bans Model Abuse and Sets Hardware Safety Rules

OpenAI Speeds Up Codex Steering for Active Tasks

OSS Scanner Offers Free Scans, Not Reviewed Findings

Early Validation Helps, but Does Not Set a Reliability Rate

The Earlier Water-Plant Study Was a Simulation

Access Is Becoming Clearer Than Deployment Assurance

Sources

Read next

Tags

Related articles

OpenAI’s Navier-Stokes Proof Faces Translation Critique

Anthropic Bans Model Abuse and Sets Hardware Safety Rules

OpenAI Speeds Up Codex Steering for Active Tasks

Goodfire Says AI-Agent Monitors Cut Safety Costs

OpenRouter Adds Step 5 Preview at $1/$2.70