Anthropic launches OSS Scanner, free opt-in vulnerability scanner with AI-generated reports lacking human review
Anthropic announced OSS Scanner, a free opt-in vulnerability scanner for critical open-source projects, powered by its strongest models. The service provides periodic security scans at no cost, but all reports are fully model-generated without human review or triage, which may lead to incorrect or invalid findings.
Coverage timeline
Techmeme
Anthropic : Anthropic launches OSS Scanner, a free opt-in vulnerability scanner for critical open-source projects; its AI-generated reports are sent without human review — We're launching OSS Scanner, an opt-in vulnerability scanner for the open-source ecosystem informed by our experience using Claude …
The Verge AIStevie Bonifield
Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner . It says open-source projects that opt-in will get "thorough, periodic security scans by our strongest models at no cost." That could mean open-source projects get alerted about possible security issues sooner, but the trade-off is that OSS Scanner's reports don't come with human review: The outputs of this opt-in vulnerability scanner will be fully model-generated, without human review or triage. This will enable faster and more frequent scanning, but means that it is possible reports will be incorrect or invalid. Th … Read the full story at The Verge.
