The frontier corps see cybersecurity as a core line of business, and Anthropic's S-1 filed today puts that in writing for investors. Many have us have been observing this trend, but now here it is in black and white. Anthropic says it expects that defending enterprise networks and critical infrastructure will increasingly require frontier AI, as each new generation of models gets better at finding and exploiting vulnerabilities. The filing points to Claude's performance on ExploitBench, rising from 40% with Opus 4.8 to 78% with Claude Mythos 5 and 91% with Opus 5.5 over roughly four months. (I'd love to see dedicated hill climbing on evals for defenders, not just exploitation) Anthropic already has Claude Security for Claude Enterprise customers, and it has committed up to $100 million in cyber defense initiatives through Project Glasswing, while noting that future investments haven't been finalized. Of course, the filing doesn't include a cybersecurity revenue figure, so for now this is a stated priority and an expectation, with the numbers still to come, but they are likely to grow exponentially. OpenAI is making the same bet in public through Daybreak. That has implications across the ecosystem, such as: - Enterprises will increasingly find that the company selling them the model also wants to sell them the code scanning, triage and fixes, which forces a decision on whether your model provider should also be your security provider. - Security vendors, especially in AppSec, are now competing with first-party lab products, and I suspect durable differentiation will come from proprietary data, deep workflow integration, distribution/relationships and the ability to take accountable action as model access becomes table stakes. - Partners and MSSPs become the delivery and governance layer, since OpenAI says access to its underlying cyber models remains with the approved partner and is not transferred directly to the customer, which raises the bar for firms outside these programs. - The broader ecosystem has to deal with this capability cutting both ways, since Anthropic's own risk factors cite a September 2025 case of a Chinese state-sponsored group manipulating Claude Code to attempt infiltration of roughly 30 global targets, and note that researchers have used its models to exploit other companies' systems, at times in connection with authorized bug bounty programs. As I've said with cloud and still say with AI, you can't outsource accountability, and that holds even when your model provider is also selling you the security tooling. It will be interesting to see how widely security leaders will consolidate AppSec and vulnerability management with their model provider, or keep those capabilities independent of the company whose models and agents they are also trying to secure.