Anthropic launches free AI security scans for open-source projects
TL;DR
Anthropic's offering to help open-source projects track down security vulnerabilities with a new service called OSS Scanner. It says open-source projects that opt-in will get "thorough, periodic security scans by our strongest models at no cost.
Nauti's Take
For small teams, OSS Scanner is most useful as an additional early-warning channel: run a trial on a low-risk repository, reproduce every finding, and compare its hit rate with existing scanners. The key questions are how Anthropic handles data access, retention, and report disclosure; without human triage, a model-generated finding should never be published as a confirmed vulnerability or treated as a clean bill of health.
Sources
