Anthropic launches Cyber Mission: CIDP for critical infrastructure and free OSS Scanner, turning Glasswing into a long-term defense push

Why it matters

【Key points】

On Oct 8 Anthropic launched the Anthropic Cyber Mission, turning Project Glasswing lessons into a long-term defensive push with two starting tracks: critical infrastructure and open-source software.

For infrastructure it introduced the Critical Infrastructure Defense Program (CIDP), bringing frontier Claude, on-site engineers and threat research to trusted providers that protect operational technology in power, water and transport, plus government systems. Founding partners include Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC and Rockwell Automation. For open source it launched OSS Scanner, inspired by Google's OSS-Fuzz: enrolled projects get free, periodic scans from Anthropic's strongest models; it is meant for maintainers who can keep up with findings, with human-verified disclosure kept for others. Anthropic says exploit costs have already fallen while fixes stay slow, and that AI may favor defense in about two years. Earlier this week it folded Glasswing into the expanded Cyber Verification Program (on-site e/711).

【Verifiable】

Anthropic: https://www.anthropic.com/news/anthropic-cyber-mission

【Our read】

1. This is not the same as e/711. CVP decides who gets stronger cyber capabilities; Cyber Mission is Anthropic putting people, models and scanning into OT and open source. Together they are the defensive story.

2. Free top-model scans shift the bottleneck from finding bugs to triage and patching—the post itself notes Glasswing fixes often took months.

3. Routing CIDP through OT integrators and industrial security vendors means Anthropic is embedding in the existing contractor chain rather than selling straight to utilities.