Physix FrontierPhysix Frontier · News Briefing Card (Engadget · Oct 9, 2026)
Anthropic launches free OSS Scanner for open-source security
KEY FACTS
- Anthropic has launched OSS Scanner, offering free periodic security scans to participating open-source projects.
- The scans are performed by Anthropic's most powerful models, including Claude Mythos.
- Scan reports are generated entirely by models, with no human review or triage.
- Anthropic says reports may be incorrect or invalid, in exchange for faster and more frequent scanning.
- The service is inspired by OSS-Fuzz, which Google and OpenSSF have operated since 2016.
- Anthropic also offers a paid product, Claude Security, that can scan and patch code.
PHYSIX OBSERVATION
Free scanning is a genuine boon for open-source projects that lack security resources, but fully model-generated reports with no human review mean the false-positive rate is uncontrollable. This looks more like an AI vendor using the open-source ecosystem as a testing ground for security capabilities while paving the way for a paid product. Open-source maintainers should treat the reports as leads rather than conclusions, and avoid being drowned by a flood of alerts.
Source: Engadget report