Anthropic's Project Glasswing: 37,966 findings but only 217 fixed in 7 months

matthew_d_green · x · 2026-11-12

Debate erupts over Anthropic's Project Glasswing vulnerability program: 37,966 reported findings with just 2 exploited in the wild. VulnCheck tracked 442 CVEs (0.5% of this year's total), only 19.4% published, 217 marked fixed, 1,654 duplicates, and questioned Anthropic's claimed 94.2% true-positive rate. Critics counter that proactive research should be judged by bugs found before attackers, not by wild exploitation.

Related event: VulnCheck Audit: Anthropic's Glasswing Logged 37,966 Findings but Only 217 Fixed(5 posts)→

Original post →

More from Companies & People

Companies & People channel →