OSS Scanner Joins Free AI Vuln Hunting

Automated vulnerability finding for open source now runs on three parallel tracks: continuous fuzzing, human-triaged AI disclosures, and raw model reports shipped straight to maintainers. Anthropic’s Oct 8, 2026 Cyber Mission launch put free OSS Scanner on that map beside Google’s OSS-Fuzz and Anthropic’s own slower coordinated-disclosure path, with Claude Mythos named among the models that write the reports (Anthropic’s Frontier Red Team post).

Free OSS Scanner reports

OSS Scanner is an opt-in service for eligible open-source projects. Enrolled repos get periodic scans from Anthropic’s strongest models at no charge. Each packet is meant to include a self-contained reproducer, an explanation (with a bisection to when the bug landed when that is possible), and a candidate patch when one is available.

The differentiator is speed without a human gate. Reports are fully model-generated. Anthropic says that can mean wrong severity or other inaccuracies, and it still expects a true-positive rate above 90% as the pipeline improves. In a validation pass, expert pen testers checked 97 critical and high findings across 48 projects: 85 (88%) met Anthropic’s CVD bar, 11 were real but duplicated other findings, and one was a false positive.

Enrollment is a pull request against Anthropic’s project template repo, with eligibility framed like OSS-Fuzz: critical impact on infrastructure and user security, decided case by case. Early maintainer quotes in the same post (PostgreSQL, OpenSSL, wolfSSL, HotCRP, curl) describe usable exploits and patches, not generic LLM noise.

For teams that can verify PoCs themselves, the service reads as a high-volume early-warning feed rather than a finished ticket.

Continuous OSS-Fuzz campaigns

Google’s OSS-Fuzz is the template Anthropic cites by name. Anthropic’s research post says OSS Scanner is “inspired by” the positive impact of Google’s OSS-Fuzz on the open-source ecosystem: free scans for projects that matter to infrastructure, not a paid enterprise SKU.

The concrete differentiator Anthropic states is method. The research post describes OSS-Fuzz as a project that scans open-source software for vulnerabilities with fuzzers. OSS Scanner finds vulnerabilities with Anthropic’s strongest language models and ships exploit writeups and patch drafts.

Neither source publishes a joint price card, because both pitch the maintainer-facing path as free. OSS Scanner’s free tier is explicitly tied to Anthropic’s Defender Advantage Fund in the Cyber Mission announcement.

Fuzzer coverage and model-written exploit packets are the two free maintainer paths Anthropic places next to each other this week.

Paid Claude Security audits

Claude Security is Anthropic’s general-access product for code scanning and patching. The research post draws a hard line: Claude Security helps enterprises defend their systems. OSS Scanner exists so open-source projects get audits at no cost.

Same lab, different purpose under Anthropic’s wording. Claude Security is the enterprise product for organizations defending their systems. OSS Scanner is the free audit path for open-source projects that meet critical-impact eligibility, open a PR to enroll, and can absorb a stream of model-written findings. Mythos-class models show up on the OSS Scanner side of that split in Anthropic’s wording.

Anthropic has not published, in these posts, a dollar figure for Claude Security next to OSS Scanner’s “free of charge” line. The comparison that is sourced is purpose: paid platform defense versus free ecosystem defense.

Budget-backed private codebases sit with Claude Security under that framing. Volunteer-maintained critical libraries sit with OSS Scanner.

Human CVD disclosures

Project Glasswing left a backlog problem Anthropic states in public numbers. Over roughly six months of scanning important projects, models produced more than 29,000 candidate vulnerabilities. Humans manually reviewed and triaged about 6,000. Nearly 5,000 unverified reports went out only after maintainers asked for the full dump. That human bottleneck is why OSS Scanner exists.

Coordinated vulnerability disclosure stays in force for projects that cannot triage raw model output. Anthropic will keep sending human-verified reports under its CVD process, especially where maintainer capacity is thin. Glasswing taught another lesson the Cyber Mission post puts plainly: finding bugs got cheaper and faster. Verifying, prioritizing, and fixing did not. Months could pass between discovery and a fix. On operational technology, a safe patch window can be far longer.

The differentiator versus OSS Scanner is correctness theater versus latency. CVD burns scarce reviewer time so fewer junk tickets hit small teams. OSS Scanner accepts some noise so capable projects get PoCs while attackers can already draft exploits in minutes, per Anthropic’s framing.

When maintainer capacity is thin, Anthropic’s CVD path remains the slower, human-verified channel the company says it will keep running beside the fast track.

Unfilled triage capacity

Line up the four options and the hole is obvious. OSS-Fuzz finds many crash bugs but does not replace maintainer judgment on severity and patch merge. OSS Scanner and the Glasswing dump raise signal volume. Claude Security helps shops that can pay. Human CVD protects the under-resourced by throttling what they receive. None of those systems is a standing triage and fix crew for the long tail of critical libraries run by a handful of volunteers.

Anthropic lists what it wants next: more projects on OSS Scanner, automated triage and patching for those who opt in, and research into harder secure architectures. It has funded groups including the Python Software Foundation, Alpha-Omega and OpenSSF via the Linux Foundation, the Apache Software Foundation, plus Akrites and Gold Eagle for report coordination. Claude for Open Source (free Claude Max subscriptions) and the Cyber Verification Program sit beside the scanner as adjacent help. Funding and model access expand what maintainers can receive. They leave verification and merge work on the same small teams.

The empty slot stays durable second-shift triage for projects that are too important to ignore and too small to staff a security rotation. Free Claude reports and free fuzzing both widen the intake funnel. They do not own the merge queue, the release train, or the week a volunteer is offline.

Anthropic’s own next steps for the open-source track are the ones already on the Cyber Mission list: enroll more projects in OSS Scanner, automate triage and patching for maintainers who want that, and share hardening research projects can reuse.