AI has changed the security picture for companies of all shapes and sizes. The same tools that help teams build faster also help attackers find weak spots faster. As an edtech company that handles student data, we've taken this threat extremely seriously from the beginning, and we're always looking for new ways to stay ahead of it.
That's why Ednition jumped at the first opportunity to apply to Anthropic's Cyber Verification Program (CVP). And we're please to announce that after Anthropic reviewed our security controls, we were accepted. The CVP is our newest way to stay ahead, giving us access to Claude's most advanced cyber capabilities, so we can identify potential vulnerabilities in our systems.
For our edtech vendor partners and the districts they serve, this means the infrastructure moving student data will be tested with some of the most advanced security tools in the industry.
Ednition has been a security-first company since day one. It's not a label we adopted; it's how we've built every part of RosterStream. We have maintained SOC 2 compliance since we launched, added ISO 27001 certification in recent years, run real-time compliance monitoring through tools like Drata, and have always put RosterStream through independent third-party penetration testing. Joining the CVP takes that commitment to the next level.
Anthropic's public Claude models block most offensive cybersecurity work, like vulnerability discovery and exploit testing, by default. That's a sensible safeguard, but it also limits defenders who need to probe their own code the way an attacker would. The CVP opens that door for verified organizations only. The results are striking: in just four months, program partners found more than 129,000 verified vulnerabilities, according to Anthropic.
Anthropic expanded the program on October 6, 2026, but getting in is not automatic.
To get in, we had to prove our security controls and complete Anthropic's business verification steps. Anthropic reviews every applicant before granting access, so our acceptance is further proof that we maintain the highest level of security protocols.
Ednition joined at the Defense Access level. Meaning our team will use Claude to run our own vulnerability analysis and test on our code. It will sit alongside the scanning and testing tools we already use, so we catch more, sooner.
Security has been part of how we build since our first line of code. Ednition's security-first approach means investing in certifications, monitoring, and transparency that go above and beyond what districts and our partners expect.
The CVP adds to a program that's already in place:
Certifications prove our controls work on audit day. The CVP gives us extra assurance that there are no gaps in between.
Using AI to protect our systems is one thing. Protecting student data whenever we use AI is another, and we treat it just as seriously. Here's how it works:
The CVP is about securing our code and infrastructure. Student records stay where they belong: within the control of our customers and protected by our tight security infrastructure.
Security has always been the foundation of how we work, and joining the CVP program raises that bar again. For edtech vendors and districts that want an integration partner they can trust with student data, Ednition checks every box.
For more details on our security-first approach visit our Trust Center, read our FAQ, or book a call with our team.
