What we know
Where sources disagree
Whether vulnerability reports receive human review before they are sent to maintainers
- Reports are sent to opted-in maintainers without human review. — SecurityWeek, Techmeme
- Reports explain suspected flaws and may include reproduction steps and fixes; human review is not addressed. — Help Net Security
Confirmed by several sources
- Anthropic launched OSS Scanner as a free, opt-in vulnerability scanning service for open-source projects, offering periodic scans. — The Hacker News, Help Net Security, The Verge, Techmeme
- The service uses Anthropic AI models to identify potential vulnerabilities in open-source software. — The Hacker News, Help Net Security, The Verge, Techmeme
- Anthropic says the scanner draws on its experience using Claude to find vulnerabilities during Project Glasswing. — The Hacker News, Help Net Security
Reported by one source
- Reports may explain how to reproduce suspected flaws and, when available, how to fix them. — Help Net Security
Open questions
- It is not yet clear how often the scanner will identify valid vulnerabilities or how maintainers will handle reports that prove inaccurate. — Help Net Security, SecurityWeek, Techmeme
Coverage 6 publishers
TechmemeFirst report
Anthropic: Anthropic launches OSS Scanner, which provides free, opt-in security audits for open-source projects by sending AI-generated reports without human review — We're launching OSS Scanner, an opt-in vulnerability scanner for the…
-
Anthropic launches free AI security scans for open-source projects
Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner. It says open-source projects that opt-in will get "thorough, periodic security scans by our strongest models at no…
-
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.
-
Anthropic offers free AI security scans to open-source maintainers
Anthropic’s OSS Scanner is a new, free service that uses the company’s strongest AI models to find security vulnerabilities in open-source software. Maintainers who opt in receive periodic scans and reports explaining suspected flaws, how…
-
Anthropic now offers a free vulnerability-finding service for open-source software
Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner.
-
Anthropic Launches Free AI Vulnerability Scanner for Open-Source Projects
Anthropic on Thursday unveiled OSS Scanner as an opt-in vulnerability scanner to help secure the open-source ecosystem using artificial intelligence (AI). "It's an opt-in service informed by our experience using Claude to find…
Earliest report first. Articles stay on their publishers’ sites; each link opens the original.