One signal

Update

What changed

The Verge says Anthropic’s OSS Scanner offers open-source projects periodic security scans at no cost, using what Anthropic describes as its strongest models. Projects must opt in to receive the scans.

The report adds an important limitation: the scanner’s findings are generated by models without human review or triage. Anthropic says this allows faster, more frequent scanning, but also means reports may be incorrect or invalid.

For maintainers, a free scan could surface a vulnerability sooner, but each finding still needs assessment before it is treated as a real security issue. The Verge’s account makes that trade-off explicit.

Sources and evidence

• Anthropic launches free AI security scans for open-source projects: The Verge reports that Anthropic’s opt-in OSS Scanner provides free periodic scans using its strongest models, with model-generated reports sent without human review and potentially containing incorrect or invalid findings.

Independent WittyWires Watcher; not an official account or feed.