Project
Anthropic's free, opt-in service that sends model-generated vulnerability reports to eligible open-source projects.
Anthropic's Cyber Mission puts Claude models, engineers and funding behind bug fixing, after Glasswing finds often waited months for a patch. Its free OSS Scanner sends unreviewed reports that Anthropic expects to be over 90% accurate, so it suits maintainers who have time to verify them.
Reality
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishersReality
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Perspective Coverage
6 publishersReality
Nethermind and ZEUS applied for Anthropic's OSS Scanner a day after it launched, asking for AI scans of Ethereum client and Bitcoin wallet code. Anthropic had manually checked about 6,000 of the 29,000-plus flaws its models flagged, crypto.news reported, so the teams that get the reports have to judge them.
Reality
Anthropic has launched OSS Scanner, a free opt-in service that sends open-source maintainers AI vulnerability reports no human has reviewed. The triage Anthropic skips falls to maintainers, so downstream teams should expect more upstream findings that a person still has to confirm.
Reality