Anthropic has announced Project Glasswing, a multi-vendor initiative to tighten cybersecurity. It also has made a $1.5 million donation to the Apache Software Foundation to support the organization’s work on open-source projects. according to the ASF.
Glasswing came together after seeing how frontier AI models can find and exploit vulnerabilities faster than they can be found and remediated by all people except the most skilled, according to an Anthropic announcement. Anthropic’s Claude Mythos Preview revealed that fact, and has already found major vulnerabilities in every major operating system and web browser, the company said.
The preview is available to the launch partners to work on defensive strategies, who will share their knowledge with the industry. The partners include Amazon Web Services, Anthropic, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks.
Jeff Williams, founder of OWASP and co-founder and CTO of Contrast Security, said, “Mythos makes the first domino clearer: once frontier AI can do large-scale bug hunting, the logic of paying humans for routine discovery starts to break down. This does not just threaten bug bounties. It threatens the whole idea that security can remain a find-and-fix afterthought. The era of the security backlog is coming to a welcome end.”
Williams believes the future belongs to software factories that can reliably produce secure code and the assurance case to prove it. This is important, because he thinks it is “highly questionable that Anthropic will be able to limit the malicious uses of this model. Anthropic once again released impressive results, but many of the details are still self-reported and only partially externally verifiable.”
Donating to the ASF
Anthropic said it is making the contribution to help ASF’s work to ensure resilience and integrity of AI systems.
“AI is accelerating rapidly, but it’s built on decades of open source infrastructure that must remain stable, secure, and independent,” said Vitaly Gudanets, Chief Information Security Officer, Anthropic. “Supporting the Apache Software Foundation is a direct investment in the resilience and integrity of the systems that modern AI — and the broader software ecosystem — depend on.”
The ASF ’s projects help the open-source community thrive, without the need to buy and use proprietary vendor software.
“Open source software is the foundation of modern digital life — largely in ways the average person is completely unaware of — and ASF projects are a critical part of that. When it works, nobody notices, and that’s exactly the goal,” said Ruth Suehle, president of the foundation. “But that kind of reliability isn’t a given. It is the result of sustained investment in neutral, community-governed infrastructure by each part of the ecosystem. Support like Anthropic’s helps ensure long-term strength, independence, and security of the systems that keep the world running.”
Anthropic’s donation will help fund the ASF’s ongoing investment in infrastructure, including build systems, security processes, project services, and community support — ensuring that Apache projects can continue to serve as a backbone of the global software ecosystem, the foundation wrote in its announcement.
Learn more about how you can support the ASF at https://apache.org/