Anthropic Gives Claude to Defenders of Power Grids and Water Utilities: 11 Partners

Anthropic announced the Critical Infrastructure Defense Program on Thursday, October 8. Companies that protect power grids, water utilities and transport systems will get access to frontier Claude models, Anthropic engineers and the company's threat research. The program has 11 partners, including CrowdStrike and Hitachi. It is the first part of Anthropic Cyber Mission, which the company describes as a long-term initiative to support defenders.

What participants get

The package has three parts. The first is the models themselves: frontier Claude, not cut-down versions. The second is Anthropic engineers, the people who help build the model into defensive workflows. The third is threat research: data and analysis on how attackers operate and what has already been observed in the wild.

The combination makes sense. A model alone is not enough: in industrial networks, value depends on integration with specific equipment, protocols and procedures. That is what the engineers are for.

Why infrastructure

Energy, water supply and transport share a common problem. Equipment stays in service for decades and is updated rarely, and some systems were designed when internet connectivity was never expected. Attackers need to find only one forgotten vulnerability. Defenders have to close them all.

The consequences are different, too. A data breach at a bank is measured in money and reputation. A failure at a substation or a water treatment plant is measured in lost power and health risks. Such incidents have already happened: the hack of the water treatment system in Oldsmar and the shutdown of the Colonial Pipeline in 2021 showed this clearly.

Defenders in this field also suffer from a chronic shortage of staff. If a language model takes over log analysis, alert triage and reading vulnerability descriptions, analysts free up time for decisions that cannot be delegated.

The partners

Of the 11 participants, the available description names two. CrowdStrike is an endpoint security vendor and threat intelligence provider, a company that sees attacks through telemetry. Hitachi is an industrial conglomerate with energy and infrastructure businesses, and therefore has access to real operational technology (OT). The pairing is clear: threat data on one side, knowledge of how the equipment works on the other. This is my interpretation of the lineup, not a statement from Anthropic.

The URL of the TNW article contains "oss-scanner", which hints at a tool for checking open-source code. The available excerpt gives no details, so we will clarify when the full text of the announcement is available.

Key parameters

• Program: Critical Infrastructure Defense Program, the first part of Anthropic Cyber Mission
• Announcement date: Thursday, October 8, 2026
• Partners: 11, including CrowdStrike and Hitachi
• What is provided: frontier Claude models, engineers, threat research
• Sectors: power grids, water supply, transport networks
• Format: long-term initiative; duration and budget not stated

What the announcement leaves out

The announcement does not disclose the names of the other nine participants, the access terms or the cost. It is also unclear how the program handles operators' sensitive data: industrial networks are often isolated under regulatory requirements, and a cloud model will not simply get in. Nor does it say what restrictions apply to using the models in offensive scenarios. For defenders, such tools are useful only to the extent they can be used safely inside the perimeter.

What operators should check

If you are responsible for IT or OT at a utility, water company or transport operator, it helps to prepare four questions before talking to vendors. Where is data physically processed, and can the model be deployed inside your own environment? Which logs and configurations will the model see, and which will stay closed to it? Who is liable for a faulty recommendation that causes downtime? And how does participation in the program square with your regulator's requirements? The answers will show whether the program fits your network or remains, for now, a showcase for large players.