Anthropic Launches OSS Scanner Offering Free Claude-Powered Vuln Audits to Open-Source Maintainers

Anthropic opened enrollment for OSS Scanner, an opt-in service that runs periodic security scans on open-source repos inside an air-gapped VM using its strongest Claude models. Pen-testers reviewed 97 critical and high-severity findings from an early run across 48 projects and cleared 85 for disclosure, 11 duplicates and one invalid. Anthropic says it has processed more than 6,000 vulnerability reports through its coordinated disclosure process to date; maintainers enroll by PR to anthropics/oss-scanner with a project.yaml.