Anthropic's Cyber Mission reports 6,157 open-source vulnerabilities, partners with 11 critical-infrastructure vendors

The Cyber Mission and its two programs

Anthropic launched its Cyber Mission on October 8, 2026, organizing the work around two coordinated tracks: the Critical Infrastructure Defense Program for operational technology environments and the OSS Scanner, a free vulnerability-discovery service for open-source maintainers. The company framed both as responses to the same underlying problem, that flaws are now identified faster than they can be verified and fixed.

Vulnerability tally and review process

The initiative drew on findings produced between November 1, 2025, and October 2, 2026, during which Claude models generated 29,439 raw findings. Anthropic reported 6,157 of those findings to maintainers across 591 open-source projects; as of October 2, 2026, 5,103 had been acknowledged and 516 had been patched upstream, roughly 8% of disclosed issues. Anthropic issued 584 identifiers tied to those findings, comprising 219 CVE records and 365 GitHub Security Advisories, with a single finding sometimes carrying both. Six external security firms reviewed 6,123 findings and confirmed 5,674 as valid, a 92.7% true-positive rate.

Critical Infrastructure Defense Program partners

The Critical Infrastructure Defense Program works through eleven founding partners already embedded with operators: Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation. The mix spans consulting firms, industrial network-security specialists, and the manufacturers that build and update the underlying equipment. Hitachi, which signed a strategic agreement with Anthropic in May and joined Project Glasswing in June, is contributing OT expertise to the program working groups. Dan Gunter, CEO of Insane Cyber, said the sites that need protection most, such as remote substations, offshore platforms, and air-gapped plants, are exactly where traditional tools cannot reach and specialists cannot be. Tony Baker, VP and Chief Product Security Officer at Rockwell Automation, said the technology must be applied responsibly, validated rigorously, and deployed with safety and reliability at the forefront.

OSS Scanner design and early evaluation

The OSS Scanner delivers periodic security reports to enrolled open-source projects without a human review step before delivery, with each report including a proof of concept, an explanation of the vulnerability, and a suggested fix where available. Anthropic targets a true-positive rate above 90% and described the service as inspired by Google's OSS-Fuzz. Maintainers enroll by submitting a pull request to Anthropic's public oss-scanner GitHub repository, and eligible projects must have critical impact on infrastructure or user security and supply a Dockerfile that builds the project and permits a fully offline audit. In an initial evaluation, penetration testers reviewed 97 critical and high-severity findings across 48 projects, finding that 85 met criteria for coordinated disclosure, 11 were real but duplicate issues, and one was deemed invalid. Maintainers offered direct assessments: Todd Ouska of wolfSSL said that of 74 reports received, all but two were valid and five became CVEs; OpenSSL Corporation's Anton Arapov said reports, including raw model output, were as good as or better than what it gets from people; and PostgreSQL's Noah Misch noted that several reports came with fixes his team could use nearly as-is.

Build on Project Glasswing

The Cyber Mission follows Project Glasswing, announced April 7, 2026, with partners including Amazon. The launch comes shortly after Project Glasswing moved into the expanded Cyber Verification Program, which paired Mythos 5.1 with verified red teams, and Anthropic has positioned OSS Scanner as a cost-free channel for open-source projects that meet its admissibility criteria while directing the Critical Infrastructure Defense Program at vendors already working with operators of long-lived equipment that often cannot be taken offline for patching.