Anthropic Cyber Mission: open-source security scans and critical-infrastructure defense
What is it?
Anthropic launched a long-term cyber program for defenders. The main piece is OSS Scanner, which gives open-source projects periodic free security scans from its strongest models. Reports include a proof of concept and a suggested fix, but they are model-generated and not human-reviewed. A Critical Infrastructure Defense Program (CIDP) and an expanded Cyber Verification Program also launched.
Why does it matter?
Maintainers can enroll, though the program is meant for projects that can handle the volume of findings. The vendor expects a true-positive rate above 90%Vendor claim. Nobody has measured it independently yet.
Maturity
PilotCIDP starts with a small cohort of providers. OSS Scanner is enrollment-based for core maintainers.
How to track it
- Independent checks of the claimed 90%+ true-positive rate for OSS Scanner: watch for public reports from enrolled projects or outside evaluations.
- Wider OSS Scanner enrollment and a larger CIDP partner group: follow up on Cyber Mission posts on the Anthropic news page.