Threat Intelligence
The Threat Intelligence team investigates real-world cases of misuse of Claude, and works with the broader Safeguards team to improve our defenses. To improve the safety and security of frontier AI models, we publish regular reports detailing the methods malicious actors use to exploit them.
How we work
Detect
We identify concerning activity on Claude via detection tools, our enforcement team, intelligence partners, and from the open source.
Investigate
Our investigators review the activity to understand what the actor was doing and the methods they used.
Attribute
Where the evidence allows, we work out who is behind the activity.
Disrupt
We ban the accounts involved in the activity to cut off access to Claude.
Strengthen
We turn our findings into improvements to our classifiers, policies, and product safeguards to help prevent similar misuse.
Share
When relevant, we share what we’ve learned with governments, threat intelligence partners, and the public.
