From Engadget · Steve Dent · · 1m
Anthropic launches free security scanner for open-source code
Anthropic's new OSS Scanner offers open-source projects free vulnerability checks using AI, though reports won't be reviewed by humans.
In brief
Anthropic's new OSS Scanner offers open-source projects free vulnerability checks using AI, though reports won't be reviewed by humans. Anthropic launched OSS Scanner, a free AI-powered vulnerability finder for open-source software that uses its strongest models but skips human review. Originally reported by Engadget.
Anthropic launches free security scanner
Anthropic announced OSS Scanner, offering open-source projects free vulnerability checks. Projects that join will receive thorough, periodic security scans by our strongest models at no cost.
“Projects that join will receive thorough, periodic security scans by our strongest models at no cost.”
Reports are AI-generated, not human-reviewed
The outputs of this opt-in vulnerability scanner will be fully model-generated, without human review or triage. This enables faster scanning but means reports may be incorrect or invalid.
“The outputs of this opt-in vulnerability scanner will be fully model-generated, without human review or triage.”
Why open-source security matters
Google and Anthropic rely heavily on open-source code projects that underpin the internet, often run by unpaid workers. The XZ Utils backdoor showed how vulnerabilities in such code are highly dangerous.
At a glance
Anthropic launched OSS Scanner, a free AI-powered vulnerability finder for open-source software that uses its strongest models but skips human review.
