---
type: "raw_signal"
id: "anthropic-launched-oss-scanner-a-free-opt-in-542550"
slug: "anthropic-launched-oss-scanner-a-free-opt-in-542550"
title: "Anthropic launched OSS Scanner , a free opt-in AI vulnerability scanner for critical open-source projects."
description: "Anthropic has launched OSS Scanner, an opt-in service for scanning critical open-source repositories for security vulnerabilities."
retrieval_nugget: "Anthropic has launched OSS Scanner, an opt-in service for scanning critical open-source repositories for security vulnerabilities."
observed_at: "2026-10-10"
record_date: "2026-10-10"
date_kind: "observed_at"
why_it_matters: "Source: https://github.com/anthropics/oss-scanner"
novelty: "notable"
verification_level: "source-linked"
signal_type: "release"
source_platform: "github.com"
topics: ["anthropic"]
entities: ["Anthropic","OSS Scanner"]
related_patterns: ["agent-security-moves-to-runtime-boundaries"]
source_url: "https://github.com/anthropics/oss-scanner"
source_urls: ["https://github.com/anthropics/oss-scanner"]
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:anthropic-launched-oss-scanner-a-free-opt-in-542550"
status: "published"
visuals: []
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
routes: {"html":"https://newruntime.com/signals/anthropic-launched-oss-scanner-a-free-opt-in-542550/","markdown":"https://newruntime.com/signals/anthropic-launched-oss-scanner-a-free-opt-in-542550.md","json":"https://newruntime.com/signals/anthropic-launched-oss-scanner-a-free-opt-in-542550.json"}
---

# Anthropic launched OSS Scanner , a free opt-in AI vulnerability scanner for critical open-source projects.

## Retrieval answer

Anthropic has launched OSS Scanner, an opt-in service for scanning critical open-source repositories for security vulnerabilities.

Anthropic has launched OSS Scanner, an opt-in service for scanning critical open-source repositories for security vulnerabilities. A project enrolls by adding a directory and configuration through a pull request to the scanner repository. Project owners provide a build environment and a contact address; an optional threat model can describe security goals and severity criteria.

The scanner builds each project in an isolated virtual machine with network access, then analyzes it after the VM is moved to a network without internet access. Anthropic says findings are emailed to the designated contacts with reproduction steps and a proposed patch where available. Reports are model-generated, are not reviewed by a human, and will not be made public. The repository also says there is no 90-day disclosure period for these findings.

Source: https://github.com/anthropics/oss-scanner

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Anthropic](https://newruntime.com/topics/anthropic.md): Explore the anthropic topic hub.
- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)