Anthropic's Claude Security moves to continuous repository scanning
The shift from point-in-time scanning to findings that auto-resolve and reopen as code evolves means security teams spend less time triaging stale reports. AppSec engineers and platform teams on Claude Enterprise can trial it with the bundled credits before the 31 December 2026 window ends, making it a direct alternative to point-in-time scanners like Snyk or GitHub code scanning.
Anthropic updated Claude Security to continuously watch repositories and rescan code as changes land. The tool now closes a finding automatically once a fix ships, reopens it if the bug reappears, and factors in security-team notes plus an editable threat model to judge attacker reachability. Previously it was an on-demand or scheduled scanner whose results went stale as code changed. Anthropic says thousands of organizations have found over 1 million vulnerabilities with it since April. Claude Enterprise customers get the public beta with US$25K in monthly credits for 2 months through 31 December 2026.
Anthropic’s Claude Security now rescans repositories as code changes and marks findings fixed once patches land.
Until now, Claude Security was a scanner you ran (on demand or on a schedule) that handed you a list of bugs, and that list went stale as soon as your code changed.
But now it watches your repositories all the time, rescans each change as it lands, closes a finding by itself once the fix ships (wherever it was made), reopens it if the bug comes back, and uses notes from your security staff plus an editable threat model to judge which bugs an attacker could actually reach.
Anthropic says thousands of organizations have found over 1M vulnerabilities since April.
Claude Enterprise customers get the public beta plus $25K monthly credits for 2 months through December 31, 2026.