Checked fact 122612 Oct 2026Safety and security
Anthropic's post says each report includes a self-contained reproducer and an explanation of the vulnerability, and, where possible, a bisection showing when the bug was introduced and a candidate patch.
The exact words it rests on
Each report contains a self-contained reproducer, explanation of the vulnerability (including a bisection to determine when the bug was introduced, where possible), and candidate patch (when available) for how the bug can be fixed.
What the source said when we opened it, on 12 Oct 2026.
The source
An opt-in vulnerability-finding service for open-source software
Checked
Checked by the notis newsroom on , against the source above.
In the story
Anthropic's OSS Scanner writes vulnerability reports without human review 12 Oct 2026
Cite this fact
Anyone may quote this address. It does not change; if we correct the story, this page says so.