Anthropic launches Cyber Mission: Critical Infrastructure Defense Program and free OSS Scanner

Cyber Mission: two tracks, one long-term commitment

On 8 October 2026, Anthropic announced the Cyber Mission, a new organization-wide initiative to support defenders with tools, research, and resources to secure software and systems. The Mission launches with two focus areas:

Critical Infrastructure Defense Program (CIDP): Starting with operational technology (OT) behind power grids, water systems, transportation networks, and government systems. CIDP brings Anthropic's frontier models, on-site engineers, and threat research directly to OT defenders. The program recognizes that state-sponsored adversaries have spent years gaining footholds in these systems across sectors, and that OT defenders have decades of domain expertise but face severe resource shortages.

OSS Scanner: Free regular security scans for open-source projects from Anthropic's strongest models. The tool targets the free, shared code that most software depends on, finding vulnerabilities and proposing patches. OSS Scanner is available to open-source projects at no cost.

Frontier models for defenders, not just attackers

Anthropic frames the Cyber Mission as addressing an asymmetry: frontier models can be misused to exploit vulnerabilities and conduct cyber operations, yet defensive tools--including Anthropic's own--have not reached enough defenders who need them. The Cyber Mission aims to close this gap by directing frontier capabilities toward defense.

The announcement acknowledges Project Glasswing (a collaboration with AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, Linux Foundation, Microsoft, NVIDIA, Palo Alto Networks) uncovered many vulnerabilities, but "we haven't yet achieved a sufficient reduction in cyber risk." The Cyber Mission expands beyond Glasswing to release tools, research, and resources in new areas.

Early stage; scope and access details TBD

The Cyber Mission is described as a long-term commitment starting with two areas. Specifics on CIDP enrollment criteria, OSS Scanner rate limits, model versions used, scan frequency, and patch proposal workflow are not detailed in the launch announcement. Anthropic states it will "expand the Cyber Mission to release tools, research, and resources in new areas to help secure the world" over time. No independent evaluation of OSS Scanner detection rates or CIDP operational impact is available.

Critical infrastructure operators and OSS maintainers should engage

Operators of power grids, water systems, transportation networks, and government OT systems should evaluate CIDP participation for on-site engineering support and threat intelligence. Open-source project maintainers should integrate OSS Scanner into their CI/CD pipelines for continuous vulnerability detection. Security teams should monitor Anthropic's Cyber Mission updates for expanded tooling and research releases.