The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
Launching an opt-in vulnerability-finding service for open-source software
- Published
- Record updated
Summary
Anthropic is launching OSS Scanner, an opt-in service that runs its strongest models, including Claude Mythos, to scan open-source projects for vulnerabilities at no cost. Its outputs are fully model-generated without human review or triage, so some reports may be incorrect or invalid. Each report includes a self-contained reproducer, an explanation, and a candidate patch where available.
Mitigation
Each report contains a self-contained reproducer, explanation of the vulnerability (including a bisection to determine when the bug was introduced, where possible), and candidate patch (when available) for how the bug can be fixed.