Anthropic Launches OSS Scanner, a Free AI security flaw Scanner

What happened

Anthropic has launched OSS Scanner, a free, opt-in vulnerability scanner for critical open-source projects. Anthropic is an artificial intelligence company based in San Francisco, and its products and services include Claude and Claude Code.

11 of 97 audited findings duplicated known issues; maintainers report inflated severity. The Anthropic OSS Scanner runs the company’s strongest models, including Claude Mythos, against enrolled codebases.

Reports go straight to maintainers without human review. That trade delivers faster findings, but shifts triage work onto project teams.

11 days after the October 8 launch, Anthropic reported 77 critical and 803 high model-rated findings .

TL;DR Scale: 114 projects accepted from about 650 applications, as of October 19. Maintainers supply a Dockerfile; audits run in an isolated VM with no Internet.

Performance: 85 of 97 audited critical and high findings (88%) met Anthropic’s disclosure bar. wolfSSL says 72 of 74 reports were valid.