{
  "slug": "claude-security",
  "name": "Claude Security",
  "tagline": "Anthropic's agentic vulnerability scanner, enterprise availability on Mythos-class models",
  "maintainer": "Anthropic",
  "url": "https://anthropic.com/news/claude-code-security",
  "category": "frontier",
  "targets": [
    "General code",
    "Enterprise repositories",
    "Claude Code plugin"
  ],
  "approach": "Agentic multi-stage analysis that traces data flows and re-examines findings to filter false positives; findings carry CWE, severity and confidence; produces patch files",
  "license": "Enterprise SaaS, billed as token usage",
  "status": "Active (public beta May 2026; on Claude Mythos 5 from 2026-08-21)",
  "since": "2026-02-20",
  "summary": "Claude Security is Anthropic's vulnerability scanner, launched as Claude Code Security in a February 2026 research preview, opened to enterprises in May 2026 with a reported 2,100 vulnerabilities patched in three weeks, shipped as a Claude Code plugin in July 2026, and running on Claude Mythos 5 for enterprise customers from 21 August 2026. Anthropic's Project Glasswing partners reported more than 10,000 high or critical findings by May 2026, including the wolfSSL certificate-forgery CVE-2026-5194.",
  "details": [
    "The scanner is general-purpose: it traces data flows, re-examines its own candidates and emits patches. It is the most widely deployed AI scanner in enterprises. On cryptographic code it finds implementation bugs; zkSecurity's comparisons show plain Claude runs finding five of seven CIRCL bugs when given cryptography skills, and missing the OpenVM soundness bug without a specialised harness."
  ],
  "strengths": [
    "Scale of deployment and results.",
    "Integrated with Claude Code; emits patches.",
    "Confidence and CWE on every finding aid triage."
  ],
  "limits": [
    "Not cryptography-aware; protocol and constraint bugs need domain skills or a specialist tool.",
    "Volume of findings creates triage burden.",
    "Enterprise plans only; model versions change under you."
  ],
  "fit": [
    "Use it as the baseline scanner for the implementation layer of any codebase on a Claude enterprise plan, with zk-skills or zkao on the cryptographic core."
  ],
  "references": [
    [
      "Claude Code Security announcement",
      "https://anthropic.com/news/claude-code-security"
    ],
    [
      "Project Glasswing initial update (2026-05-22)",
      "https://www.anthropic.com/research/glasswing-initial-update"
    ],
    [
      "Claude Mythos 5 for defenders (2026-08-21)",
      "https://claude.com/blog/bringing-claude-mythos-5-to-more-defenders"
    ]
  ],
  "category_name": "Frontier-lab and general scanners",
  "page": "https://agentsast.com/tools/claude-security/",
  "updated": "2026-09-13"
}