Anthropic Launches Free AI‑Powered Scanner to Spot Open‑Source Vulnerabilities

Anthropic, the artificial‑intelligence research lab best known for its Claude language model, has introduced a free service that scans open‑source projects for security flaws. The new tool, called OSS Scanner, is positioned as a way for developers to automatically detect vulnerabilities in their code without incurring additional costs.

The move comes as the software supply chain faces heightened scrutiny after a series of high‑profile breaches that exploited weaknesses in widely used libraries. Open‑source components power everything from mobile apps to critical infrastructure, making early detection of bugs essential to prevent downstream attacks.

Anthropic’s offering leverages its generative‑AI expertise to analyze codebases, flagging patterns that resemble known exploit techniques. While the exact mechanics remain proprietary, the company describes the scanner as capable of handling a range of languages and integrating with common version‑control workflows.

By making the service free, Anthropic hopes to lower the barrier for smaller projects that lack dedicated security teams. Maintainers can run the scanner on public repositories, receive reports on potential issues, and prioritize fixes before they become exploitable.

Industry observers note that a zero‑cost, AI‑driven solution could shift how the open‑source community approaches security, encouraging more proactive remediation. If adoption grows, the tool may complement existing static analysis and bug‑bounty programs, creating a layered defense for the ecosystem.

The announcement was first covered by technology outlet Engadget, which highlighted the service as part of Anthropic’s broader push into developer‑focused tooling. As the scanner rolls out, developers will be watching to see how well it integrates with existing pipelines and whether it can keep pace with the evolving threat landscape.