OSS-Scanner: Free AI Tool from Anthropic Aims to Protect Open-Source Projects from Vulnerabilities

Anthropic has launched a new initiative to safeguard critical infrastructure and open-source software from cyberattacks. This project, named "Cyber Mission," focuses on two main areas. The "Critical Infrastructure Defense Program" (CIDP) provides Anthropic's Claude models, engineers, and threat analyses to secure power grids, water supply systems, and transportation networks.

In addition, the company introduced a free OSS-Scanner that regularly checks open-source projects for security vulnerabilities. Given that nearly all software relies on open-source code often maintained by small volunteer teams, the scanner is designed to automatically identify vulnerabilities, explain them, and suggest patches. Anthropic anticipates an accuracy rate of over 90 percent, although reports will be sent without human review and may contain errors. According to Anthropic, potential attackers already have access to powerful AI models, while security tools on the defense side remain insufficiently widespread.