wolfSSL

Anthropic says an internal test found ninety-six real vulnerabilities among ninety-seven reported findings, although independent analysts have not verified the results.

The service is available selectively to core maintainers of projects considered critical to infrastructure or user security, including PostgreSQL, OpenSSL, wolfSSL, and HotCRP.

Anthropic's disclosure process does not impose a ninety-day deadline on unvalidated AI findings, while independently verified vulnerabilities follow the company's standard coordinated disclosure policy.

The company also launched its Critical Infrastructure Defense program, pairing Claude models and engineers with security firms protecting power, water, transportation, and other operational technology networks.

In a pilot, outside testers reviewed ninety-seven high or critical findings across forty-eight projects, and eighty-eight percent met Anthropic's usual disclosure bar, with only one clear false alarm.

Maintainers at projects including Postgres, OpenSSL, and WolfSSL have said the signal is high.

This is separate from Claude Security, the paid product for company code bases.

Tim can say who should actually enroll.

You want to push updates across managed browser, fleet, ASAP while you're at it.

High severity vulnerabilities have been patched in both OpenSSL and WolfSSL.

If you compile either library into your applications or appliances, update and rebuild right now.

Not much time is left there.