
Free AI vulnerability scans for open-source projects
OSS Scanner is Anthropic’s free, opt-in vulnerability-finding service for open-source projects, built on its strongest models including Claude Mythos. Maintainers enroll with a pull request. Each report comes with a reproducer, an explanation, and a candidate patch when available. In an early validation, 85 of 97 critical and high findings (88%) met the disclosure bar. Reports get no human review, so some may be wrong. Modeled on Google OSS-Fuzz.
OSS Scanner by Anthropic is a free service that identifies vulnerabilities in open-source projects using advanced AI models. Maintainers can enroll via a pull request, receiving detailed reports that include reproducer, explanations, and potential patches, though reports are not human-reviewed.
A source that found nothing is a measurement. A source that has not run is a gap. Neither means the launch lacks the thing.