Open-source projects get free security scans from Anthropic's strongest models, with reports sent without human review

Anthropic launched its Cyber Mission on October 8, including OSS Scanner, a free security-scanning service for open-source projects. Enrolled projects get periodic scans from Anthropic's most capable models, and each report includes a proof of concept, an explanation and, where available, a suggested fix. Reports are model-generated and sent without human review, so they arrive faster but may contain errors such as a wrong severity rating. Anthropic expects a true-positive rate above 90%.

The service is meant for projects with the capacity to keep up with the findings; others will keep getting human-verified disclosures. Maintainers can also apply to Claude for Open Source for free Claude Max subscriptions. Anthropic also started a Critical Infrastructure Defense Program that brings models and on-site engineers to the security providers protecting power grids and water systems, with 11 founding partners including CrowdStrike, Palo Alto Networks and Deloitte.