The asymmetry between AI-driven attackers and defenders keeps widening in 2026: finding vulnerabilities with a model is now cheap and fast, while verification and remediation still run on human labor. Anthropic put that gap on the table on October 8 with Anthropic Cyber Mission, putting its strongest Claude to work on two fronts: on-site engineering for critical infrastructure, and the open-source code that underpins the global software supply chain.
Critical infrastructure: shipping models and engineers together
The Critical Infrastructure Defense Program, announced the same day, follows a clear principle: Anthropic doesn't enter the field; it acts as a force multiplier. Operational Technology equipment that runs power grids, water utilities, factories, and rail networks is designed to last twenty-plus years; shipping with known flaws is normal, and a vulnerable control system can sit unpatched for years. Anthropic is not patching the equipment itself. Instead, it hands frontier Claude models, on-site engineers, and threat research to eleven founding partners, who then serve their own customers.
The eleven partners fall into three groups. Consulting and system integration: Accenture, Booz Allen, Deloitte, PwC. Security vendors: CrowdStrike, Palo Alto Networks, Dragos, Nozomi Networks, Insane Cyber. Equipment vendors: Hitachi, Rockwell Automation. Together, they cover consulting, detection, and remediation across the industrial control system defense chain. Andrew Turner, president of commercial cyber at Booz Allen, called OT the next frontier for autonomous AI-enabled attacks, hinting that attackers are already automating with AI and defenders' tooling has to keep up. Anthropic stated openly in the announcement that the first phase is a small cohort, designed to learn which approaches actually work before scaling.
Open source: handing unreviewed reports straight to maintainers
The second leg of Cyber Mission, OSS Scanner, is more lightweight and direct. During Project Glasswing, Anthropic's models surfaced over 29,000 candidate vulnerabilities across widely used open-source projects; staff manually reviewed just over 6,000. A growing share of maintainers had the capacity to triage at scale and asked for the full unreviewed set, so Anthropic turned that ad-hoc arrangement into a standing service.
OSS Scanner mirrors Google OSS-Fuzz. Maintainers enroll by opening a PR in the anthropics/oss-scanner repo, supply a Dockerfile so the model can run audits in an offline container, and receive reports that include a proof of concept, root cause analysis, and suggested patches. Severity can be customized per project. Anthropic also offers a threat model configuration file that lets maintainers tell the scanner which inputs are adversarial and which areas are out of scope. Reports skip human review in exchange for shorter find-to-notify cycles; Anthropic targets a true-positive rate above 90%.
In an internal dry run, senior penetration testers vetted 97 critical and high-severity findings from an early-version scanner across 48 projects and cleared 85 for disclosure. Of the remaining 12, eleven were real bugs that duplicated known issues or other findings from the same scan. During early trials, embedded crypto library developer wolfSSL received 74 reports, found 72 valid, and turned five into CVEs. Maintainer Anton Arapov's verdict was blunt: a report with a working exploit attached is essentially the fix.
Not a replacement, but a layer
Anthropic drew a clear boundary in the announcement: OSS Scanner is for projects with the capacity to absorb unreviewed findings; projects without that bandwidth continue to receive human-verified disclosures through the existing coordinated disclosure process. Both efforts extend Project Glasswing, which was folded into an expanded Cyber Verification Program earlier this week, with Anthropic's resources tilting toward the defensive side.
Anthropic also opened the Claude for Open Source application channel, providing free Claude Max 20x subscriptions, and the Defender Advantage Fund (0xDAF) keeps OSS Scanner free long-term. The fund, established in August, has already committed ongoing support to the Python Software Foundation, the Apache Software Foundation, and Alpha-Omega and OpenSSF via the Linux Foundation. Anthropic is trying to backstop hardware, models, and human capacity in the AI defense war in one go.
Defenders are still in the slow lane, for now
Anthropic's own forecast isn't optimistic. Over the next two years, the cost of exploiting a vulnerability will keep falling, while verification, disclosure, and repair remain human-bound. In OT settings, a patch may have to wait for a safe maintenance window, and in extreme cases, that could mean decades. The current objective of Cyber Mission is to keep water, power, communications, and transport running in the face of AI-enabled attacks, with fewer exploitable paths and faster recovery when something gets through. This isn't a one-shot effort; Anthropic itself acknowledges it as a multi-year long-term engineering program.