Anthropic launches OSS Scanner, a free open-source project security scanning service

Anthropic launches a free service called OSS Scanner that provides regular security scans and vulnerability reports generated by its strongest models (including Claude Mythos) for opt-in open-source projects. The service generates reports entirely by model, without human review or triage, so scans are faster and more frequent, but reports may be wrong or invalid. Anthropic says this gives open-source projects a greater defensive advantage. Previously, AI tools have helped discover major security vulnerabilities in open-source software, such as the Copy Fail vulnerability in May that affected almost all Linux distributions; meanwhile, some open-source projects are struggling with a surge in AI-generated vulnerability reports, a situation encountered by Linus Torvalds and Google.