{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/anthropic-cyber-mission-oss-scanner-2026/",
 "asOf": "2026-10-30",
 "id": "anthropic-cyber-mission-oss-scanner-2026",
 "date": "2026-10-08",
 "datePrecision": "day",
 "title": "Anthropic launches critical-infrastructure support and free open-source scanning",
 "lane": "defense",
 "kind": "program",
 "summary": "Anthropic launches its Cyber Mission with a Critical Infrastructure Defense Program and an opt-in OSS Scanner offering free periodic security scans to open-source maintainers. Scanner reports are model-generated and sent without human review; Anthropic continues human-verified disclosure for projects unable to absorb that volume. The announcement describes efforts and expected performance rather than an independently measured reduction in security risk.",
 "whyItMatters": "It makes triage capacity and the route from a finding to a safe fix explicit constraints on expanding defensive access.",
 "actors": [
  "anthropic"
 ],
 "topics": [
  "autonomous-defense",
  "vulnerability-discovery",
  "vulnerability-repair"
 ],
 "atlas": [],
 "artifacts": [],
 "sources": [
  {
   "url": "https://www.anthropic.com/news/anthropic-cyber-mission",
   "publisher": "Anthropic",
   "title": "Introducing the Anthropic Cyber Mission",
   "date": "2026-10-08",
   "type": "primary",
   "accessed": "2026-10-13"
  }
 ],
 "keyFacts": [
  {
   "fact": "The Critical Infrastructure Defense Program brings Claude models, on-site engineers and threat research to providers protecting operational technology. Anthropic describes a founding partner cohort and ongoing work, rather than quantified security outcomes.",
   "locator": "Defending critical infrastructure"
  },
  {
   "fact": "OSS Scanner is opt-in and free. Enrolled projects receive periodic model-generated reports including supporting evidence, an explanation and a suggested fix where available, without human review. Anthropic expects a true-positive rate above 90%; this is an expectation, not a published independent measurement. Anthropic warns that reports can contain errors, including wrong severity ratings.",
   "locator": "Securing open-source software"
  },
  {
   "fact": "The service is intended for projects able to keep up with findings. Anthropic says it will continue human-verified coordinated disclosure for other projects and notes that verification, prioritization and patching remain slow. Its Glasswing account says it often saw months between discovery and repair; this is a narrative statement, not a measured patch-time average.",
   "locator": "Securing open-source software; Why we’re doing this"
  }
 ],
 "significance": 3,
 "fideQuestions": [
  "FID-076",
  "FID-088"
 ],
 "methods": [
  "ai-vulnerability-discovery"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-10-13",
 "revisions": []
}