Launching an opt-in vulnerability-finding service for open-source software
We’re launching OSS Scanner, an opt-in vulnerability scanner for the open-source ecosystem informed by our experience using Claude to find vulnerabilities during Project Glasswing.
ProofVendor claim only
Key points
- Get updates on our latest red-teaming research and findings.
- On CyberGym, one academic vulnerability-finding benchmark, LLMs have gone from finding under 20% of vulnerabilities at the beginning of last year to finding over 85% this year.
- Inspired by the positive impact on the open source ecosystem of Google's OSS-Fuzz, a project that scans open-source software for vulnerabilities with fuzzers, we are launching OSS Scanner to find vulnerabilities in open-source code with our strongest language models.
- Some of the feedback we received as we tested early versions of OSS Scanner and our raw model outputs:
Sources (1)
- [1]Launching an opt-in vulnerability-finding service for open-source softwareAnthropic Research · Oct 8, 12:00 AM
We’re launching OSS Scanner, an opt-in vulnerability scanner for the open-source ecosystem informed by our experience using Claude to find vulnerabilities during Project Glasswing.
Get updates on our latest red-teaming research and findings.
Extractive summary: sentences quoted from the sources.
Hype check
Independently evaluated2 independent looks since
- Evaluation · Oct 8, 2026Beyond Imitation: A Framework and Benchmark for LLM-Assisted Peer Review
- Evaluation · Oct 8, 2026Mine Odyssey: Benchmarking Spatial Agentic Intelligence in the Wild
- Follow-up · Oct 8, 2026When Interfaces Speak: Data-Aware Generative UI Harness for Active Interaction
- Follow-up · Oct 8, 2026anthropics/anthropic-sdk-python v1.12.1
- Follow-up · Oct 8, 2026MiniVer-V: Identifying Minimal Sufficient Evidence for Short Video Verification
- Follow-up · Oct 8, 2026anthropics/claude-code v2.1.294
Before this
- Oct 7, 2026[AINews] Claude Haiku 5.5 — better than GPT-6 Luna at the same pricing
- Oct 7, 2026browser-use/browser-use 0.13.11
- Oct 6, 2026unslothai/unsloth v0.1.903-beta: New Browser + Voice Cloning
- Oct 6, 2026EmbeddingGemma 2: an open, lightweight multimodal embedding model
- Oct 6, 2026Thoughts from San Francisco
- Oct 6, 2026Expanding the Cyber Verification Program
