Anthropic has introduced OSS Scanner, a new service designed to help open-source projects identify security vulnerabilities. The company states that projects opting in will receive thorough, periodic security scans using its strongest models at no cost. This approach allows for faster and more frequent scanning cycles compared to traditional methods. However, the service operates without human intervention in the reporting process. Anthropic notes that the outputs from this opt-in vulnerability scanner are fully model-generated, meaning they do not undergo human review or triage. While this enables increased scanning frequency, the company acknowledges that reports may be incorrect or invalid due to the absence of manual verification. The service is available to open-source projects that choose to participate in the program.
$ cat source.txt