🇪🇸 Spanish, 9 October 2026, open-source-security
Anthropic Launches OSS Scanner, a Free Service Analyzing Open-Source Projects for Vulnerabilities
The service uses Anthropic's powerful models to scan open-source projects for security vulnerabilities, generating reports with reproducers, explanations, and patch candidates.
The service is inspired by OSS-Fuzz, a Google project that uses fuzzers to test open-source software for bugs. Unlike Claude Security, which is designed for enterprise use, OSS Scanner is intended for open-source projects. The service is free and available to open-source projects with a critical impact on infrastructure and user security.
In testing, the service generated hundreds of reports, including chained vulnerabilities that allowed remote code execution without authentication. The 88% of critical findings that were validated were deemed accurate, although some maintainers noted that the severity of the findings may be inflated or that the scanner misunderstood the project’s threat model.