{"rewrite":{"id":"r_7eecbabf1c5a7204e64310af","clusterId":"c_b6a744a0cf980d261a2b0709","slug":"anthropic-opens-free-ai-security-scanner-to-open-source-maintainers","model":"deepseek-v4-1-flash","headline":"Anthropic Opens Free AI Security Scanner to Open Source Maintainers","summary":"Anthropic opened OSS Scanner, a free vulnerability-finding service that runs its models against open source code with no human review. In initial validation, experts checked 97 findings across 48 projects; 85 met Coordinated Vulnerability Disclosure criteria, 11 were known or duplicate issues, and one was a false positive. PostgreSQL and OpenSSL took part. Maintainers of eligible projects apply by pull request.","whyItMatters":"Anthropic is putting an unreviewed automated scanner in front of infrastructure-critical projects and letting maintainer feedback, not its own validation numbers, set the terms for how far it spreads.","webCardHtml":"\u003cp\u003eAnthropic\u0026#39;s OSS Scanner is narrower than its Claude Security product and aimed only at open source projects that carry weight for infrastructure and user security. Acceptance is decided case by case, and a project\u0026#39;s key maintainers apply by pull request against the scanner\u0026#39;s repository.\u003c/p\u003e\u003cp\u003eReports can include reproduction steps, a description of the flaw, binary search for when a bug entered the code, and proposed patches. The tradeoff Anthropic names is that no human reviews the scans, so findings can be wrong or not valid.\u003c/p\u003e","blueskyPost":"Anthropic's scanner still routes every finding through humans. The 97-finding trial needed Coordinated Vulnerability Disclosure because no maintainer wants an unreviewed patch dropped on PostgreSQL or OpenSSL.","twitterPost":"Anthropic's OSS Scanner finds bugs, but humans still triage them. The 97-finding trial is the real constraint, not the model.","threadsPost":"Anthropic's OSS Scanner automates discovery, but Coordinated Vulnerability Disclosure means humans still confirm each one. The 97 results across PostgreSQL and OpenSSL show the scanner can find issues; the hard part is what maintainers do with an unreviewed patch.","newsletterBlurb":"Anthropic opened OSS Scanner, a free service that scans open source code for vulnerabilities using its models, with no human review of results. In initial validation, 85 of 97 findings across 48 projects met Coordinated Vulnerability Disclosure criteria, 11 were known or duplicate issues, and one was a false positive. PostgreSQL and OpenSSL took part, and maintainers of eligible projects apply by pull request.","attributionJson":"[{\"source\":\"GIGAZINE\",\"url\":\"https://gigazine.net/news/20261009-anthropic-oss-scanner/\",\"title\":\"Anthropic Launches Free AI Security Scanning Service 'OSS Scanner' for Open Source Projects\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":4588,"outputTokens":555,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1791521530,"createdAt":"2026-10-09T04:46:47.000Z","publishedAt":"2026-10-09T04:51:07.000Z","updatedAt":"2026-10-09T04:51:07.000Z"},"cluster":{"id":"c_b6a744a0cf980d261a2b0709","canonicalTitle":"Anthropicがオープンソースプロジェクト向けに無料AIセキュリティスキャンサービスの「OSS Scanner」を開始","representativeArticleId":"a_2859d2de8aa4d9572e9b9ce6","sourceCount":1,"writtenSourceCount":1,"writeAttempts":0,"isSolo":true,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[\"OSS Scanner\"],\"studios\":[\"Anthropic\"],\"people\":[],\"type\":\"announcement\",\"domain\":\"other\",\"is_roundup\":false}","contentType":"news","status":"published","firstSeenAt":"2026-10-09T03:13:00.000Z","lastSeenAt":"2026-10-09T03:13:00.000Z","updatedAt":"2026-10-09T04:51:06.000Z"},"attribution":[{"source":"GIGAZINE","url":"https://gigazine.net/news/20261009-anthropic-oss-scanner/","title":"Anthropicがオープンソースプロジェクト向けに無料AIセキュリティスキャンサービスの「OSS Scanner」を開始"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":["OSS Scanner"],"studios":["Anthropic"],"people":[],"type":"announcement","domain":"other","is_roundup":false},"keyFacts":null}