Anthropic Unveils Free AI Scanner to Secure Open-Source Code and Critical Infrastructure

Anthropic has announced Cyber Mission, a comprehensive initiative designed to safeguard critical infrastructure and open-source software against emerging cyber threats. As part of this effort, the AI company is rolling out a free vulnerability scanner for open-source code and launching a dedicated defense program in collaboration with major cybersecurity and industrial partners.

Automated Vulnerability Detection for Open Source

Under the initiative, Anthropic is offering a free open-source software (OSS) scanner that automatically inspects codebases, identifies security flaws, explains the underlying vulnerabilities, and suggests corrective patches.

Open-source components serve as the foundation for nearly all modern software, yet many widely used packages are maintained by small volunteer teams with limited security resources. Maintainers of repositories critical to infrastructure or user safety can participate in the scanning initiative by opting in through GitHub.

Anthropic projects that the AI scanner will achieve an accuracy rate exceeding 90 percent. However, the company notes that vulnerability reports are delivered directly without human review, meaning they may occasionally include errors.

Protecting Critical Infrastructure

Alongside the open-source scanner, Anthropic introduced the Critical Infrastructure Defense Program (CIDP). The program is tailored for operators managing vital public systems, such as electrical grids, water treatment facilities, and transportation networks.

Participating operators will receive direct access to Anthropic's Claude models, technical engineers, and dedicated threat analysis. Anthropic has established the program alongside several prominent founding partners, including CrowdStrike, Palo Alto Networks, Deloitte, and Rockwell Automation.

Equipping Defenders with AI Capabilities

Anthropic's move comes in response to an evolving threat landscape where malicious actors are increasingly leveraging advanced AI models to identify and exploit vulnerabilities. By distributing automated analysis tools and partnering with infrastructure operators, the company aims to close the resource gap and provide defenders with comparable AI-driven defenses.