Anthropic Introduces Free AI Security Scans for Open-Source Projects

Anthropic has introduced a new service called OSS Scanner aimed at assisting open-source projects in identifying security vulnerabilities. Projects that choose to participate will receive “thorough, periodic security scans by our strongest models at no cost.” This initiative could help open-source projects detect potential security issues more quickly, but it comes with a caveat: the reports generated by OSS Scanner will not undergo human review.

> The outputs of this opt-in vulnerability scanner will be fully model-generated, without human review or triage. This will enable faster and more frequent scanning, but means that it is possible reports will be incorrect or invalid. These reports will be generated by our strongest models (including Claude Mythos) to give open-source projects the largest defensive advantage.

OSS Scanner isn’t the first AI tool designed to assist in bug hunting. Recent months have seen AI technologies uncover significant security flaws in open-source software, such as the “Copy Fail” bug that affected nearly all Linux distributions in May. However, some open-source projects are finding it challenging to manage the influx of AI-generated bug reports, a situation that has even affected prominent figures like Linus Torvalds and major tech companies.