Anthropic has launched the Anthropic Cyber Mission, a long-term initiative to secure critical infrastructure and open-source software. The program includes partnerships with 11 security firms to protect operational technology (OT) systems.
TL;DR
- Anthropic partners with 11 security firms to protect critical infrastructure using AI tools and research.
- The Critical Infrastructure Defense Program (CIDP) aims to secure OT systems supporting power grids, water systems, factories, and transportation networks.
- Anthropic also launches OSS Scanner, an opt-in service for open-source projects to receive periodic vulnerability scans.
What happened
Anthropic has introduced the Anthropic Cyber Mission, a long-term initiative focused on securing critical infrastructure and open-source software. The program provides AI tools, research, and technical resources to defenders.
The Critical Infrastructure Defense Program (CIDP) combines Anthropic's Claude models, on-site engineers, and threat research to protect OT systems. Founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.
Several partners are already using Claude to address vulnerabilities and help customers fix them. The initiative begins with a small group of providers to assess the most effective and practical approaches.
Anthropic also launches OSS Scanner, an opt-in service inspired by Google's OSS-Fuzz. This service provides periodic scans from its most capable models free of charge, including a proof of concept, explanation, and suggested fix for vulnerabilities.
Why it matters
The initiative addresses the security challenges posed by legacy OT systems, which often cannot be taken offline for patching and may retain known vulnerabilities for years.
Anthropic highlights the difficulty of verifying, prioritizing, and fixing security findings, noting that vulnerabilities identified during Project Glasswing sometimes remained unresolved for months.
The Cyber Mission aims to expand to more partners and sectors, reducing exploitable entry points and enabling faster recovery from attacks on essential services.
For developers and startups, this initiative provides access to advanced AI tools and resources for securing critical infrastructure and open-source software. Investors may see this as a strategic move by Anthropic to enhance its security offerings and partnerships.
Key facts
- Anthropic Cyber Mission includes partnerships with 11 security firms: Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.
- The Critical Infrastructure Defense Program (CIDP) combines Claude models, on-site engineers, and threat research to protect OT systems.
- OSS Scanner is an opt-in service for open-source projects to receive periodic vulnerability scans, inspired by Google's OSS-Fuzz.
- Anthropic expects a true-positive rate above 90% for OSS Scanner and plans to improve the quality of the fixes over time.
- The Defender Advantage Fund (0xDAF) supports pilot programs in these areas and keeps OSS Scanner free.
- Anthropic has funded organizations behind widely used open-source code, including the Python Software Foundation, Alpha-Omega, and the OpenSSF through the Linux Foundation.
- The company forecasts that in two years AI will favor defense, making it easier to catch bugs before they ship, write fundamentally secure software from scratch, and actively defend systems with models.
Context
Anthropic's initiative comes at a time when cybersecurity has reached a critical inflection point, with AI models becoming powerful tools for both defensive and offensive operations.
The increasing availability of highly capable AI models has reduced the cost of exploiting vulnerabilities, making it crucial to enhance defensive tools and strategies.
This initiative is part of Anthropic's broader effort to support defenders and secure critical infrastructure, following its previous cyber defense program for state, local, tribal, and territorial governments.
