Agents in Open source security

Anthropic launches OSS Scanner: free, unreviewed Claude bug reports for open source

Anthropic says it found over 29,000 candidate vulnerabilities in six months but could triage only about 6,000. Its pentesters checked 97 scanner findings; 85 (88%) met its disclosure bar; one was a false positive.

Why it matters: Maintainers can opt in to raw model output with reproducers and patches, trading human review for speed. Anthropic says reports may be wrong; some maintainers say severity can be inflated.