# VulnCheck Finds Glasswing Vulnerability Discovery Outpacing Fixes

> An audit found Anthropic’s vulnerability tool reported 37,966 findings but only 217 fixes, shifting triage work to open-source maintainers.

- Type: AI news
- Page: https://completeaitraining.com/news/vulncheck-finds-glasswing-vulnerability-discovery-outpacing/
- Published: 2026-11-11
- Updated: 2026-11-11
- Author: Jeroen Erne
- Jobs: Insurance, IT and development, Legal, Science and research
- Reading time: 1 min

VulnCheck’s latest audit of Anthropic’s Glasswing vulnerability discovery tool counted 442 CVEs credited to the system. Anthropic’s own ledger, however, recorded 37,966 findings against just 217 fixes, a gap that highlights the difference between raw discovery volume and completed remediation.

The audit notes that duplicates, withdrawn reports, and false positives are shifting triage costs onto open-source maintainers. These maintainers must filter a high number of submissions to identify actionable vulnerabilities, a burden that falls outside the fix count tracked by the originating tool.

For teams in insurance, legal, development, and research roles, the data underscores that the number of findings a tool generates does not directly measure its impact on security outcomes. The operational load created by unverified or redundant reports can affect resourcing decisions and risk assessments tied to open-source software supply chains.

---

This is the Markdown form of https://completeaitraining.com/news/vulncheck-finds-glasswing-vulnerability-discovery-outpacing/. The whole site is mapped at https://completeaitraining.com/llms.txt.