Anthropic Launches the Cyber Mission: OSS Scanner + CIDP

Anthropic launched the Cyber Mission on Oct 8, 2026, pairing a free OSS Scanner for open-source maintainers with a new Critical Infrastructure Defense Program (CIDP) backed by 11 founding partners. Learn what each program offers, why OSS Scanner's reports skip human review, and what to check before acting on one.

Anthropic launched the Cyber Mission today, Oct 8, 2026 — a long-term effort to give defenders free tools and expert help instead of leaving security to attackers' speed advantage. It starts with two programs: the Critical Infrastructure Defense Program (CIDP) for power grids, water systems, and transportation, and OSS Scanner, free automated vulnerability scanning for open-source software.

CIDP puts Claude models, on-site Anthropic engineers, and threat research behind the companies that actually secure operational technology (OT) — the decades-old equipment running power, water, and transit. Founding partners: Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. Security vendors and equipment manufacturers for critical infrastructure can register interest directly with Anthropic.

OSS Scanner is opt-in and free: enrolled open-source projects get periodic scans from Claude's strongest models. Each report includes a proof-of-concept exploit, an explanation, and a suggested fix. The catch — reports are model-generated and sent without human review. Anthropic expects a true-positive rate above 90%, meaning roughly 1 in 10 findings could still contain an inaccuracy, like a wrong severity rating.

Anthropic is also funding the maintainers behind code everyone depends on: the Python Software Foundation, Alpha-Omega and OpenSSF (via the Linux Foundation), and the Apache Software Foundation, plus Akrites and Gold Eagle, which coordinate vulnerability reports across sources. That funding comes from the Defender Advantage Fund (0xDAF), launched August 2026. Maintainers can also apply for free Claude Max subscriptions through Claude for Open Source, or for deeper model access through the expanded Cyber Verification Program, which absorbed the earlier Project Glasswing pilot.

Claude is now part of real-world defense infrastructure, not just a coding assistant. If you maintain open-source code or work in critical infrastructure security, there's a concrete door to walk through — but any report Claude generates without a human in the loop still needs your own verification before you act on it.