A project enrolls by adding a directory and configuration through a pull request to the scanner repository. Project owners provide a build environment and a contact address; an optional threat model can describe security goals and severity criteria.
The scanner builds each project in an isolated virtual machine with network access, then analyzes it after the VM is moved to a network without internet access. Anthropic says findings are emailed to the designated contacts with reproduction steps and a proposed patch where available. Reports are model-generated, are not reviewed by a human, and will not be made public. The repository also says there is no 90-day disclosure period for these findings.