Anthropic Launches AI Vulnerability Reporting Service and OT Security Program
Summary
Anthropic introduced an opt-in service that sends open-source maintainers unreviewed AI-generated vulnerability reports and a program pairing OT security providers with Claude models, engineers, and threat research.
Key points
- OSS Scanner periodically scans opt-in open-source projects and sends maintainers reports with potential vulnerabilities, proof-of-concept exploit code, and suggested fixes when available.
- The reports are model-generated and sent without human review; Anthropic expects a true-positive rate above 90% and cautions that reports may contain inaccuracies, including incorrect severity ratings.
- Projects not suited to handling unreviewed findings will continue to receive human-verified disclosures through Anthropic's coordinated vulnerability disclosure process.
- The Critical Infrastructure Defense Program brings Claude models, on-site engineers, and Anthropic threat research to providers serving power, water, manufacturing, and transportation operators.
- Anthropic says OT systems can be difficult to take offline for patching, leaving known vulnerabilities unresolved for extended periods.
- The program starts with 11 partners, and Anthropic plans to expand it to more partners and sectors in the coming months.
Article Details
- Event Type
- Anthropic announced two cybersecurity initiatives: OSS Scanner, a free opt-in service that sends open-source maintainers AI-generated vulnerability reports without human review, and the Critical Infrastructure Defense Program (CIDP), which supports providers securing operational technology.
- Impact
- OSS Scanner is intended to speed delivery of vulnerability findings, though Anthropic warned that reports may contain inaccuracies and estimated a true-positive rate above 90%. CIDP brings Claude models, on-site engineers, and threat research to OT security providers. The article reports no specific vulnerabilities fixed or measurable reduction in cyber risk.
Vendors
AccentureThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.AnthropicAnthropic on Thursday announced two new cybersecurity initiatives: one gives open source maintainers faster access to AI-generated vulnerability reports, and the other targets companies that help secure operationalBooz AllenThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.CrowdStrikeThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.DeloitteThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.DragosThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.HitachiThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.Insane CyberThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.Nozomi NetworksThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.Palo Alto NetworksThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.PwCThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.Rockwell AutomationThe founding partners are Accenture, Booz Allen, CrowdStrike, Deloitte, Dragos, Hitachi, Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC, and Rockwell Automation.
Products
ClaudeThe Critical Infrastructure Defense Program (CIDP) brings frontier Claude models, on-site engineers and Anthropic’s threat research to the providers that power, water, manufacturing and transportation operators rely onOSS ScannerInspired by Google’s OSS-Fuzz, OSS Scanner is a free service that uses Anthropic’s most capable models to periodically scan open source projects.
Industries
Energybrings frontier Claude models, on-site engineers and Anthropic’s threat research to the providers that power, water, manufacturing and transportation operators rely on for OT security.ManufacturingClaude models, on-site engineers and Anthropic’s threat research to the providers that power, water, manufacturing and transportation operators rely on for OT security.Transportationengineers and Anthropic’s threat research to the providers that power, water, manufacturing and transportation operators rely on for OT security.waterfrontier Claude models, on-site engineers and Anthropic’s threat research to the providers that power, water, manufacturing and transportation operators rely on for OT security.