Anthropic Launches Free Vulnerability Scanner for Open Source Projects

Oct 12, 2026
Anthropic has launched OSS Scanner, a free service that periodically scans participating open source projects for security flaws using its strongest AI models.

Anthropic launches OSS Scanner, a free service that periodically checks participating open source projects for vulnerabilities using its strongest AI models, the company detailed in a blog post. The optional service provides model generated reports without human review, so findings may be incorrect or invalid.

Anthropic said its models found more than 29,000 candidate vulnerabilities during six months of scanning, while human reviewers assessed about 6,000. An evaluation of 97 critical and high severity findings across 48 projects found that 85 met the standard for Anthropic's coordinated disclosure process, 11 were real but duplicated other findings, and one was invalid.

Each report can include a reproducer, an explanation of the flaw, information about when it entered the code, and a proposed patch. Core maintainers of eligible projects can apply through a pull request on GitHub, with eligibility focused on projects that have a critical impact on infrastructure and user security.

We hope you enjoyed this article

Consider subscribing to one of our newsletters like Cybersecurity AI Weekly or Daily AI Brief.

Also, consider following us on social media:

Cybersecurity AI AI Brief AI Brief (X)
Free newsletter

AI Programming Weekly

Weekly news about AI tools for software engineers, AI enabled IDE's and much more.

AI Token Webinar

Whitepaper

Tensordyne Napier: What If One Rack Could Do the Work of Nine?

Tensordyne

This Tensordyne whitepaper presents Napier, an inference-focused AI processor and rack-scale system based on the company’s TDN Math logarithmic number system. It examines infrastructure requirements for large mixture-of-experts and agentic models, compares major inference architecture approaches, and details the TDN AIP processor, TDN72 pod, TDN Link fabric, and Napier Ultra configuration. The paper reports simulation-based performance, cost, and accuracy-validation results, including Tensordyne’s projected comparison of one Napier rack with a nine-rack Nvidia Rubin plus Groq deployment; the chip is reported as taped out and in fabrication.

Read more

You may also like

Free, six days a week

Daily AI Brief: the AI news that matters, in your inbox.