Anthropic Proposes Automated Audit for Critical Open Source Code

Anthropic launches Cyber Mission, a defense initiative that combines a program for critical infrastructure operators with a free audit scanner for open-source repositories. The company aims for an announced accuracy of over 90% for reports, which will be delivered without human review, and opens registration on GitHub for projects deemed critical.

Reports without Human Review and Expected Accuracy Above 90%

Anthropic announces that its OSS scanner is expected to achieve an accuracy of over 90% in identifying vulnerabilities in open-source projects. The generated reports will be sent automatically, without human intervention, which may lead to errors. According to the company, attackers already have access to powerful AI models, while defenders do not yet have comparable tools. This context exists within an ecosystem where nearly all modern software relies on open-source code, often maintained by small volunteer teams.

Access to Claude, Engineers, and Analysis for Operators

Anthropic's Critical Infrastructure Defense Program, integrated into Cyber Mission, provides operators of electric grids, hydraulic infrastructures, and transportation access to Claude models, technical experts, and threat reports. CrowdStrike, Palo Alto Networks, Deloitte, and Rockwell Automation are among the founding members of the program.

A Free OSS Scanner to Inspect and Fix Code

Anthropic is launching a free AI scanner called OSS, which will regularly analyze open-source projects to detect, report, and explain vulnerabilities, as well as propose fixes. Maintainers of projects deemed critical for infrastructure or user security can register via GitHub.