Anthropic Launches Free AI Security Scanner for Open-Source Projects

Free AI-Powered Vulnerability Scans

Anthropic has launched a new service called OSS Scanner that offers free security scans for open-source projects. Projects that opt in will receive thorough, periodic security scans conducted by Anthropic's strongest models at no cost, the company says. Anthropic says the goal is to give open-source projects the largest defensive advantage by alerting them to possible security issues sooner.

Model-Generated Reports Without Human Review

The vulnerability reports are generated entirely by Anthropic's strongest models, including Claude Mythos, and do not come with human review or triage. Anthropic says this approach enables faster and more frequent scanning, but acknowledges that it is possible reports will be incorrect or invalid. The company is positioning the service as a defensive tool for the open-source ecosystem rather than a replacement for traditional security auditing.

AI Bug Hunting Gains Ground

OSS Scanner is far from the first AI tool aimed at finding bugs in open-source software. AI tools have helped uncover major security flaws in recent months, including the "Copy Fail" bug that impacted nearly every Linux distribution in May. At the same time, some open-source projects are struggling to keep up with the sudden influx of AI-generated bug reports, including Linus Torvalds and even Google. The tension highlights both the promise and the growing pains of AI-assisted security scanning in the open-source world.

Sources: The Verge Ai · Techmeme