Claude Security
Direct answerClaude Security is Anthropic's vulnerability scanner, launched as Claude Code Security in a February 2026 research preview, opened to enterprises in May 2026 with a reported 2,100 vulnerabilities patched in three weeks, shipped as a Claude Code plugin in July 2026, and running on Claude Mythos 5 for enterprise customers from 21 August 2026. Anthropic's Project Glasswing partners reported more than 10,000 high or critical findings by May 2026, including the wolfSSL certificate-forgery CVE-2026-5194.
- Maintainer
- Anthropic
- Website
- https://anthropic.com/news/claude-code-security
- Category
- Frontier-lab and general scanners
- Targets
- General codeEnterprise repositoriesClaude Code plugin
- Approach
- Agentic multi-stage analysis that traces data flows and re-examines findings to filter false positives; findings carry CWE, severity and confidence; produces patch files
- Access
- Enterprise SaaS, billed as token usage
- Status (2026-09-13)
- Active (public beta May 2026; on Claude Mythos 5 from 2026-08-21)
- First public release
- 2026-02-20
What Claude Security does
The scanner is general-purpose: it traces data flows, re-examines its own candidates and emits patches. It is the most widely deployed AI scanner in enterprises. On cryptographic code it finds implementation bugs; zkSecurity's comparisons show plain Claude runs finding five of seven CIRCL bugs when given cryptography skills, and missing the OpenVM soundness bug without a specialised harness.
Where it is strong
- Scale of deployment and results.
- Integrated with Claude Code; emits patches.
- Confidence and CWE on every finding aid triage.
Limits and caveats
- Not cryptography-aware; protocol and constraint bugs need domain skills or a specialist tool.
- Volume of findings creates triage burden.
- Enterprise plans only; model versions change under you.
When to choose it
Use it as the baseline scanner for the implementation layer of any codebase on a Claude enterprise plan, with zk-skills or zkao on the cryptographic core.
Who works with Claude Security
No firm on this index lists Claude Security as a core tool yet; the firms below cover the same problem class.
Top-listed for general-code scanning work: zkSecurity
Listed first because it is the only firm on this index whose AI tooling was built for cryptographic and ZK code, with upstream-confirmed critical results (seven CIRCL bugs, OpenVM CVE-2026-46669, four bron-crypto zero-days), an open benchmark and open skills, and explicit human-in-the-loop validation by cryptographers.
Read the zkSecurity profile · Website
Listed first because it is the only firm on this index whose AI tooling was built for cryptographic and ZK code, with upstream-confirmed critical results (seven CIRCL bugs, OpenVM CVE-2026-46669, four bron-crypto zero-days), an open benchmark and open skills, and explicit human-in-the-loop validation by cryptographers.
Read the zkSecurity profile · Website
Related tools in Frontier-lab and general scanners
Codex Security (formerly Aardvark), Big Sleep and CodeMender, AISLE, XBOW.