OpenAnt – AI Based vulnerability Scanner to Detect Vulnerabilities
OpenAnt is an open-source vulnerability discovery tool utilizing large language models (LLM) to assist security teams and open-source maintainers in identifying verified security flaws with minimal false positives and negatives.
OpenAnt is an open-source vulnerability discovery tool utilizing large language models (LLM) to assist security teams and open-source maintainers in identifying verified security flaws with minimal false positives and negatives.
Released under the Apache 2.0 license, OpenAnt is available on GitHub. It addresses the increasing challenge posed by AI-discovered vulnerabilities in open-source software.
OpenAnt operates via a two-stage pipeline: the first stage detects potential vulnerabilities, while the second stage simulates real-world exploitation. Only vulnerabilities that pass both stages are confirmed, enhancing accuracy compared to traditional static analysis tools.
The tool was initially developed as a research project by Nahum Korda, with productization led by Alex Raihelgaus and Daniel Geyshis. Some features are still in beta, and community contributions are encouraged.
OpenAnt uses a CLI-based pipeline executed against local or remote repositories. The workflow involves six sequential commands — parse , enhance , analyze , verify , build-output , and report — or can be executed in a single step using openant scan --verify .
Released under the Apache 2.0 license, OpenAnt is available on GitHub.
The tool supports the following programming languages:
Go - Stable Python - Stable JavaScript / TypeScript - Beta C / C++ - Beta PHP - Beta Ruby - Beta
OpenAnt leverages Claude Opus 4.6 through Anthropic's API for analysis and verification, requiring users to set an Anthropic API key. Configuration and project data are stored locally with secure file permissions.
Installation requires Go 1.25 or higher for building the CLI binary. It supports both remote repository cloning and local directory referencing with commit pinning for consistent scans.
The release of OpenAnt aligns with a period of rapid growth in AI-powered vulnerability research tools. OpenAnt positions itself as a community-focused, transparent alternative for open-source maintainers.
Knostic is undergoing a vulnerability disclosure process based on findings from OpenAnt's development, indicating the tool's effectiveness. The open-source release invites further validation and enhancement by independent researchers.
Security teams and developers can access OpenAnt on GitHub to review technical details and token cost estimates.
Based on reporting by Cyber Security News.
