Anthropic launches free OSS Scanner for open-source projects

What is changing?

Anthropic has launched the free OSS Scanner service for critical open-source projects as part of its Cyber Mission. Projects that opt in receive periodic scans using the company’s most capable models. Each finding includes a proof of concept showing how the bug could be exploited, a technical explanation and a suggested fix when one is available. The program builds on Project Glasswing, which scanned hundreds of widely used projects and shared findings with maintainers through a coordinated disclosure process.

To move faster, reports are sent directly to maintainers without human review. Anthropic therefore warns that details such as severity ratings may be inaccurate; it expects an initial true-positive rate above 90%. The service is intended for core open-source projects with enough capacity to triage the findings. Projects without that capacity will continue to receive human-verified disclosures. Anthropic is also pairing Claude models, on-site engineers and threat research with partner organizations to support critical-infrastructure defense.