Scaling cyber resilience
Defenses against AI advancements that make cyberattacks faster, cheaper, and more autonomous.
Why this is a top priority
AI is making cyber operations faster, cheaper, and more autonomous. This means that criminal groups, states, and other actors will now have the ability to fire off much cheaper and more powerful attacks. If governments, businesses, and individuals do not quickly harden their defenses, they will face a deluge of disruption, intellectual property theft, and exploitation.
This development makes the systems that develop and serve AI models more important than ever. If AI networks are compromised, bad actors could steal model weights, wield models to their own ends, and disrupt vast swathes of economic activity. Misalignment and disruption could beget more misalignment and disruption, making the security of AI infrastructure itself absolutely vital.
Fortunately, more capable AI defenders are also on the horizon. With more secure software, deeper and faster incident investigation and response, and superhuman vulnerability detection, cyberdefenders around the world can make their infrastructure resilient to the coming onslaught of attacks. But these benefits will require investment in technological development and adoption. With the right investments, we can establish a stronger foundation for economies, governments, and communities around the world.
What should be done
Private sector: funders, founders, and AI companies
- Founders should launch “The Great Refactor”: AI could automatically translate hundreds of millions of lines of insecure critical open-source code into memory-safe Rust, which would eliminate whole classes of vulnerabilities. This project could be set up as a Focused Research Organization to systematically secure high-impact libraries before 2030 and save billions in cybersecurity costs. See full proposal.
- Philanthropists and cybersecurity investors could fund proactive forensic-depth AI cybersecurity: AI could automate digital forensics and threat hunting to turn forensic-depth cybersecurity from a post-breach service into an always-on detection method. More broadly, advanced AI systems can be used to identify and defeat tradecraft for, develop capabilities within, and operate cybersecurity monitoring systems. Funders should support AI-driven improvements to these cybersecurity systems, including AI-developed YARA rules for firewalls, more realistic honeypotting systems, and network device monitoring systems. Details forthcoming.
Public sector: US executive and Congress
- US executive should launch “Operation Patchlight”: A more ambitious version of Anthropic's Project Glasswing and OpenAI's Daybreak, this three-year national effort would coordinate AI companies, code maintainers, and industry to find and patch open-source vulnerabilities before attackers exploit them, giving critical infrastructure defenders AI-powered security tools and free compute. The approach could be extended to closed-source critical infrastructure code. See full proposal.
- DOW and Commerce should create an AI Security Office: The two departments should stand up an office to red-team and blue-team the full American AI tech stack against sleeper-agent risks, starting as a pilot to evaluate leading AI companies and develop prevention tools, then scaling into a national security program if successful. See full proposal.
- NSA should launch a large-scale pilot: The DOW, through NSA, in coordination with others in the IC, CAISSI, and relevant FFRDCs such as RAND, should prototype an SL5 cluster that can be used for sensitive government applications. At enterprise scale, this facility would cost $277–345 million. Learn more.
- DOW should prioritize frontier AI red teaming: The DOW should designate frontier AI cyber and physical infrastructure a priority for red-team engagements, providing red-team and cyber-assistance services to frontier AI companies.
Get in touch
If you are a grantmaker, entrepreneur, or policymaker interested in accelerating progress in cybersecurity, get in touch by emailing cyber-resilience.tls@ifp.org. We are not able to reply to all requests, but we read them all.
You can join our talent database to work on cybersecurity here. We will use this database if we ever headhunt for talent to found or be an early employee in organizations working on this issue.
Join our Launch Sequence mailing list here to receive new proposals, important updates, and occasional opportunities straight to your inbox.




