Claude Security: Putting Claude to work for defenders
Play videoPlay video
Scan your code in parallel
Claude Security understands context, traces data flows across files, and identifies complex, multi-component vulnerability patterns that traditional scanners might not detect.
Validate findings
Every finding goes through an adversarial verification pass. Claude challenges its own results before surfacing them. More real issues get reported, and fewer false positives waste analyst time.
Review and patch
Claude detects issues and proposes fixes. Every finding includes a recommended patch for teams to review and approve. Fix vulnerabilities quickly rather than adding them to a growing backlog.
Claude Security Plugin for Claude Code now in beta.
Scan, validate, and patch directly inside Claude Code while keeping all code inside your environment.
Learn more
Learn moreLearn more
See details about every finding: the vulnerability, why it matters, and the proposed fix
Suggested fixes that maintain your code's structure and style
Push findings via webhooks to Slack or Jira, export for audit, and schedule recurring scans
Teams stay in control, with every patch requiring human review and approval
Powered by the same models Anthropic uses to secure its own codebase
Claude Security Plugin for Claude Code in betaClaude Security Plugin for Claude Code in beta
Claude Security Plugin for Claude Code in beta
Docs
DocsDocs
Claude Security is now in public betaClaude Security is now in public beta
Claude Security is now in public beta
Blog
BlogBlog
Evaluating and mitigating the growing risk of LLM-discovered 0-daysEvaluating and mitigating the growing risk of LLM-discovered 0-days
Evaluating and mitigating the growing risk of LLM-discovered 0-days
Blog
BlogBlog
Experimenting with AI to defend critical infrastructureExperimenting with AI to defend critical infrastructure
Experimenting with AI to defend critical infrastructure
Blog
BlogBlog
Where is this available?
The Claude Security plugin is now available in beta for all Claude Code users.
Admins can enable Claude Security in the admin console. See the getting started guide for setup steps.
The Claude Security plugin is now available in beta for all Claude Code users.
What are the security risks I should know about?
Claude can make mistakes, so you should always review proposed patches before applying them, especially for critical systems.
What types of vulnerabilities does Claude Security find?
Claude Security focuses on high-severity vulnerabilities including memory corruption, injection flaws, authentication bypasses, and complex logic errors that pattern-matching tools typically miss. It's particularly effective at finding context-dependent vulnerabilities that require understanding code across multiple files.
How is this different from traditional security tools?
Traditional tools often use rule-based pattern matching, which catches known vulnerability patterns but can produce high false positive rates and miss complex issues. Claude Security reasons through your code like a security researcher. It can read Git history, trace data flows, and understand business logic to find real vulnerabilities and generate real fixes.
Does Claude Security work with my existing security tools?
Yes. Claude Security is built to feed into the tools your team already uses. Send findings to Slack, Jira, or any ticketing system via webhooks, or export results as CSV or Markdown for tracking and audit. Documented dismissals carry forward, so triage decisions made in Claude Security stay visible wherever your team works.
Can I scan part of a repository, or run scans on a schedule?
Yes to both. You can scope a scan to a specific directory, and you can configure scheduled scans for ongoing coverage without manual kickoffs.
PrevPrev
NextNext