Anthropic Launches CIDP and Free OSS Scanner for Cyber Defense

Anthropic announced its Cyber Mission on October 8, 2026, comprising two programs. The Critical Infrastructure Defense Program (CIDP) provides Claude AI models, on-site Anthropic engineers, and threat research to organizations protecting operational technology such as power grids, water systems, and transportation networks. Eleven founding partners joined at launch: Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. Several of those partners are already working with Claude to identify and fix vulnerabilities. Anthropic plans to expand the partner base, publish learnings including failures, and conduct formalized testing in OT environments. Separately, OSS Scanner is a free, opt-in service that uses Anthropic's AI models to periodically scan open-source repositories for vulnerabilities, then sends model-generated reports with proof-of-concept exploits and suggested fixes directly to maintainers without human review. The program builds on Project Glasswing, an earlier initiative in which Anthropic scanned widely used open-source projects and privately reported vulnerabilities. Anthropic expects a true-positive rate above 90% and plans to improve fix quality and automate triage and patch application over time. Projects that patch a scanner-reported vulnerability are asked, but not required, to include a credit line with a report ID in their commit messages; Anthropic uses those IDs to track which vulnerabilities were successfully patched.