Anthropic: Claude finds 493 unnecessary attack surfaces across 25 open source projects
Anthropic ran Claude over 25 open source projects to map reachable code, and it discovered 493 issues that could help reduce software attack surface.
By GennnAi··1 min read
The projects total over five million lines of code in several languages. Claude inventoried more than 17,000 configuration options, 3,842 of them security-relevant. All eleven gated projects had unintentionally reachable code, including 93 unnecessary pre-authentication surfaces in default configuration. Reducing code reachability lowers the severity of unknown vulnerabilities without fixing each one. Anthropic argues fixing individual vulnerabilities alone scales poorly.
Source: Anthropic, published on October 20, 2026.