oss-scanner github.com ↗
Anthropic's open-source tool for scanning OSS projects for vulnerabilities and proposing patches.
ToolSecurity & privacyvulnerability-scanningopen-sourceai
Captured
Recommended in 1 thread
Tracking Anthropic-discovered vulnerabilitiesvulncheck.com ·
Mentioned as Anthropic's effort that includes patches and asks for a project's threat model, though results were mixed.
Similar tools
- OSV-Scanner ↗Security & privacy1 thread
Google's open-source scanner that checks dependencies and software against the OSV vulnerability database.
- oss-security mailing list ↗Security & privacy1 thread
Openwall's mailing list for open-source security issue disclosure and discussion.
- 1 thread
- NIST Small Business Cybersecurity Corner ↗Security & privacy1 thread
NIST's portal of cybersecurity resources aimed at small businesses.
- SafeScript ↗Security & privacy1 thread
A JavaScript subset and runtime for executing untrusted code that can only call injected facades.
- sandbox-runtime ↗Security & privacy2 threads
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
- 1 thread
- 2 threads
Also in Security & privacy
- 1Password ↗8 threads
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- 5 threads
- 4 threads
- 3 threads
- Signal3 threads
An end-to-end encrypted messaging app.
- Tor3 threads
An anonymity network that routes traffic through volunteer relays.
- 2 threads
- 2 threads
- 2 threads
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Darknet Diaries ↗2 threads
A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.
Link from a commenter, not checked or endorsed by us: ↗ https://github.com/anthropics/oss-scanner