Anthropic launches OSS Scanner for free open-source vulnerability scans

On October 9, 2026, Anthropic introduced OSS Scanner, a free vulnerability-scanning service for open-source projects. According to The Verge, participation is opt-in: projects that sign up receive periodic security scans performed by Anthropic's "strongest models," which the report says include Claude Mythos, along with vulnerability reports. The Verge notes that the reports are generated entirely by models, without human review or triage, which makes scanning faster and more frequent but may also produce incorrect or invalid findings. A report from Zhidongxi describes the same opt-in structure and adds that the service was inspired by OSS-Fuzz, Google's free open-source vulnerability-scanning service launched in 2016, and draws on Anthropic's experience using Claude to find vulnerabilities during Project Glasswing. Zhidongxi also reports that Anthropic said 88% of severe and high-risk vulnerabilities in spot checks met the standard for external reporting, while only 6,000 of the 29,000 candidate vulnerabilities found over the past six months were manually verified.