Anthropic launched what it calls the Cyber Mission on Thursday, a long term effort to put frontier models in the hands of the people defending critical infrastructure and open source code.
Zoom in: OSS Scanner is an opt in service that gives enrolled open source projects periodic scans from Anthropic's most capable models, free of charge.
- Each report includes a proof of concept showing how a bug could be exploited, an explanation, and a suggested fix where one is available.
Yes, but: The reports are model generated and sent without human review, so some will contain inaccuracies such as a wrong severity rating. Anthropic expects a true positive rate above 90%.
The big picture: The second track is the Critical Infrastructure Defense Program, which brings frontier Claude models, on-site engineers and threat research to the providers that secure operational technology.
- Founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Nozomi Networks, Palo Alto Networks, PwC and Rockwell Automation.
The backstory: Power grids, water utilities, factories and transport networks run on controllers and industrial software built to last decades, and they often cannot be taken offline to patch, so known vulnerabilities can stay unresolved for years.
Between the lines: Anthropic says state sponsored adversaries have spent years gaining footholds in these systems across many sectors so they can disrupt them, while the defenders face severe resource shortages.
- The company also funded the Python Software Foundation, the Apache Software Foundation, and OpenSSF and Alpha-Omega through the Linux Foundation.
Why it matters: Frontier models already help attackers find vulnerabilities, and this is a bet that handing the same capability to volunteer maintainers and grid operators tips the balance back toward defense.
