Click any tag below to further narrow down your results
Links
Anthropic's Claude Security now scans repositories as code changes, marks findings fixed when patches ship, and lets teams feed in their own environment context. It's in public beta for Claude Enterprise customers, with an API and MCP connector for existing workflows.
- Scans run continuously after a baseline, with re-scans weighted by each change's risk and complexity, so findings track the current code instead of a one-time snapshot.
- Findings close automatically when a fix lands, whether it was made in Claude Code or elsewhere, and reopen if the same issue reappears.
- Each project has a knowledge base and an editable threat model that shape severity ratings and show how an attacker could reach the vulnerable code.
- Enterprise customers get $25,000 a month in usage credits for two months, through December 31, 2026.
Codex Security Cloud now includes Daybreak Blue, an AI model that automatically scans GitHub repositories, reviews new commits, finds and deduplicates security issues, and generates fixes — all without requiring your laptop to be on. It's available as a plugin for both desktop and web versions.
- Scans entire repos and continuously monitors new commits for vulnerabilities
- Automatically investigates findings, removes duplicates, and prepares fixes for human review
- Runs in the background even when your machine is offline
SkillSpector scans AI agent skills for vulnerabilities, malicious patterns, and CVEs before installation. It combines fast static checks with optional LLM analysis, covers 64 patterns across 16 categories, and outputs risk scores and detailed reports.
- SkillSpector scans AI agent skills before installation, checking 64 vulnerability patterns across 16 categories (prompt injection, data exfiltration, privilege escalation, etc.) plus real-time CVE lookups via OSV.dev.
- It runs a fast static scan by default, with an optional deeper LLM-based semantic check using providers like OpenAI, Anthropic, or NVIDIA's build.nvidia.com.
- Scans output a 0-100 risk score with severity labels and suggested fixes, in formats including JSON, Markdown, or SARIF for CI/CD pipelines.
- Even without LLM analysis (--no-llm flag), it still catches known code patterns and CVEs.