Anthropic launches free AI security scans for open-source projects

The Verge
Anthropic's new OSS Scanner offers free, periodic AI-generated vulnerability reports for open-source projects, without human review.

Summary

Anthropic has launched OSS Scanner, a free service that provides periodic security scans for open-source projects using its strongest AI models, including Claude Mythos. Projects that opt in receive fully model-generated vulnerability reports, which enable faster and more frequent scanning but may contain incorrect or invalid findings since there is no human review or triage. While AI tools have helped uncover major open-source security flaws, such as the "Copy Fail" bug that affected nearly every Linux distribution in May, projects are also struggling with a surge of AI-generated bug reports, a challenge faced by figures like Linus Torvalds and even Google.

(Source:The Verge)