Anthropic Launches Cyber Mission: 11 Partners to Defend Power Grids and Open Source

Anthropic has launched Cyber Mission, a long-term program to protect critical infrastructure and the open-source ecosystem through two key initiatives: the Critical Infrastructure Defense Program (CIDP) for power grids and water systems, and OSS Scanner for scanning vulnerabilities in popular open-source code.

The threat behind the program is concrete: frontier models can be used to find and exploit vulnerabilities at machine speed, and state-sponsored hackers have been entrenching themselves in critical systems for decades. Power grid operators and open-source developers are chronically under-resourced — Anthropic aims to help close that gap by providing access to frontier models, on-site engineers, and funding.

Protecting Critical Infrastructure

CIDP combines frontier Claude models, on-site Anthropic engineers, and deep threat analysis to protect operational technology — controllers, control software, and industrial networks. These systems are built to run for decades and often can't be taken offline to install patches: a single mistake could shut down a plant or leave a city without power.

The program brings together 11 partners:

• Accenture
• Booz Allen
• CrowdStrike
• Deloitte
• Dragos
• Hitachi
• Insane Cyber
• Nozomi Networks
• Palo Alto Networks
• PwC
• Rockwell Automation

These are established providers that critical infrastructure operators already rely on: consulting and advanced tech firms, security companies, and equipment manufacturers. Several are already working with Claude to find and fix vulnerabilities. On top of that, Anthropic has expanded its program to assist government bodies: more than half of U.S. states and major critical infrastructure operators now have access to frontier Claude models and technical support to speed up code scanning, patch deployment, incident response, and red teaming.

OSS Scanner and Protecting Open-Source Code

Nearly all modern software relies on open-source code, often maintained by small volunteer teams. Project Glasswing scanned hundreds of popular projects and surfaced a wave of vulnerabilities, but developers didn't just need analysis — they needed speed.

OSS Scanner is a new opt-in service for projects with the resources to handle a stream of findings. Participants get periodic scans from the most capable Claude models, completely free. Each report includes a proof-of-concept showing how to exploit the bug, an explanation of the issue, and a suggested fix. The expected true-positive rate is above 90%. Findings are delivered without human review — this speeds up delivery but carries the risk of inaccuracies, such as misjudged severity. For projects without the resources to handle that, Anthropic will continue to disclose vulnerabilities only after human verification, through coordinated vulnerability disclosure.

Going forward, Anthropic plans to speed up the delivery of findings, expand OSS Scanner to more projects, automate triage and patching, explore new secure architectures, and fund open-source infrastructure organizations: the Python Software Foundation, Alpha-Omega, OpenSSF (via the Linux Foundation), and the Apache Software Foundation.

Cyber Mission reflects a strategic acknowledgment from Anthropic that frontier models pose a growing risk — and that this risk needs to be offset through the responsible use of the technology to defend the systems society depends on.