Anthropic launches OSS Scanner without human review

Anthropic has announced OSS Scanner, a free, opt-in service that sends open-source maintainers AI-generated vulnerability reports without human review, expecting a true-positive rate above 90 percent. The author advises maintainers to establish a triage capacity, treat every report as untrusted input, verify severity independently, and avoid publishing unverified CVEs. While the program aims to help secure code, maintainers may face significant remediation workloads as models find bugs faster. Open article →