Anthropic had Claude autonomously harden 25 OSS codebases, cutting OpenSSH pre-auth attack surface

teortaxesTex · x · 2026-10-22

Anthropic's security team published a blog post on tasking Claude with autonomously mapping and reducing the attack surface of 25 large, widely used OSS codebases. Key results: a significant reduction in OpenSSH's pre-authentication attack surface (fixed in OpenSSH 10.6), plus 500+ findings where reachability was reduced and configurations hardened so security controls can't be silently disabled. The post covers their methodology and a data preview, framing attack-surface reduction as fundamental to secure-by-design software. Widely shared as mandatory reading on autonomous security engineering.

Related event: Anthropic Lets Claude Autonomously Shrink Attack Surface of 25 Open-Source Projects(6 posts)→

Original post →

More from coding & agent

coding & agent channel →