Anthropic has launched OSS Scanner, a free service that runs periodic security audits on open-source projects and sends them AI-generated vulnerability reports. The company says projects can opt in and receive "thorough, periodic security scans by our strongest models at no cost," according to reports from Techmeme and The Verge.
The move puts Anthropic, best known for its Claude models, directly into the open-source security space. It matters because open-source code sits under most of the software the world runs, yet many projects have no budget for dedicated security teams.
How OSS Scanner works
OSS Scanner is opt-in, meaning maintainers choose whether to take part. Reports are generated entirely by Anthropic's models, without human review or triage, which the company says allows faster and more frequent scanning.
Anthropic also warns that this approach has limits. Because no person checks the output, some reports may be incorrect or invalid. The company says it uses its strongest models, including Claude Mythos, to give projects the largest defensive advantage.
- Free for open-source projects that opt in
- Periodic, automated security scans
- Reports generated by Anthropic's strongest models, including Claude Mythos
- No human review or triage before reports are sent
- Anthropic says reports may sometimes be incorrect or invalid
