Anthropic says Claude found 493 issues in 25 open-source projects

In a post by Chris Rohlf, Anthropic presents initial results from using Claude to analyze and automatically reduce the attack surface of large open-source codebases. The company says the model examined 25 projects, totaling more than five million lines of code, and found 493 issues.

The approach aims to identify unnecessarily reachable code and place it behind appropriate controls, such as authentication, user interaction, or later protocol stages. Anthropic highlights three methods: reviewing default configuration, detecting problematic combinations of options, and finding security-sensitive code that runs too early. The company says reducing code reachability does not eliminate unknown vulnerabilities, but can make them harder to exploit and reduce their severity.