Anthropic launched OSS Scanner, providing open-source projects with free recurring security scans using its most capable models.

Anthropic introduced OSS Scanner to provide free, recurring security scans for open-source software (OSS) projects using its most capable models. The supplied report does not identify the particular models, scan frequency, project eligibility requirements, or vulnerability-detection results.

The scanner is part of Anthropic Cyber Mission (Anthropic 网络安全使命), described as a long-term commitment of tools, research capabilities, and resources to protect open-source software and critical infrastructure. The initiative includes a separate Critical Infrastructure Defense Program (关键基础设施防御计划), or CIDP, rather than treating all infrastructure support as part of OSS Scanner.

CIDP supplies frontier models, embedded engineers, and threat-research capabilities to defenders of operational technology behind electricity grids, water systems, transportation networks, and government systems. These are the program’s identified sectors; the report does not quantify deployments, protected facilities, or incidents prevented.

The reported founding partners are Accenture (埃森哲), Booz Allen (博思艾伦), CrowdStrike, Deloitte (德勤), Dragos, Hitachi (日立), Insane Cyber, Nozomi Networks, Palo Alto Networks, PwC (普华永道), and Rockwell Automation (罗克韦尔自动化). Their founding-partner status is the disclosed participation fact, not evidence that each has completed a production deployment.