From scan to fix, done seamlessly Claude scans your codebase with Claude Mythos 5.1, validates findings, and suggests patches you can review and approve. Available in public beta for Claude Enterprise. How teams use Claude Security Claude reasons through your code like a skilled security researcher. It understands context, traces data flows, and catches vulnerabilities that pattern-matching tools miss. Then it suggests a fix. Scan your code in parallel Claude Security understands context, traces data flows across files, and identifies complex, multi-component vulnerability patterns that traditional scanners might not detect. Validate findings Every finding goes through an adversarial verification pass. Claude challenges its own results before surfacing them. More real issues get reported, and fewer false positives waste analyst time. Review and patch Claude detects issues and proposes fixes. Every finding includes a recommended patch for teams to review and approve. Fix vulnerabilities quickly rather than adding them to a growing backlog. Claude Security Plugin for Claude Code now in beta. Scan, validate, and patch directly inside Claude Code while keeping all code inside your environment. Built for security teams, used by Anthropic Transparency and visibility See details about every finding: the vulnerability, why it matters, and the proposed fix Targeted patches Suggested fixes that maintain your code's structure and style Fits your existing workflow Push findings via webhooks to Slack or Jira, export for audit, and schedule recurring scans Full remediation control Teams stay in control, with every patch requiring human review and approval Powered by Claude Mythos 5.1

Scan your codebase with our most cyber-capable model Security resources Claude Security Plugin for Claude Code in beta Claude Security is now in public beta Evaluating and mitigating the growing risk of LLM-discovered 0-days Experimenting with AI to defend critical infrastructure Where is this available? Admins can enable Claude Security in the admin console . See the getting started guide for setup steps . The Claude Security plugin is now available in beta for all Claude Code users. What Mythos access does this give me? Claude Security scans now run on Claude Mythos 5.1 for all Enterprise customers. You get Mythos-quality vulnerability findings without needing direct access to the model. Connect a GitHub repository and Claude Security scans it with Claude Mythos 5.1. Validated findings come back with confidence ratings and suggested patches, which you can open in Claude Code on the web and fix using the models available in your account. Scans powered by Claude Mythos 5.1 are only available in the Claude Security app on Claude.ai. The Claude Security plugin for Claude Code only uses the models available in your Claude Code account. What are the security risks I should know about? Claude can make mistakes, so you should always review proposed patches before applying them, especially for critical systems. What types of vulnerabilities does Claude Security find? Claude Security focuses on high-severity vulnerabilities including memory corruption, injection flaws, authentication bypasses, and complex logic errors that pattern-matching tools typically miss. It's particularly effective at finding context-dependent vulnerabilities that require understanding code across multiple files. How is this different from traditional security tools? Traditional tools often use rule-based pattern matching, which catches known vulnerability patterns but can produce high false positive rates and miss complex issues. Claude Security reasons through your code like a security researcher. It can read Git history, trace data flows, and understand business logic to find real vulnerabilities and generate real fixes. Does Claude Security work with my existing security tools? Yes. Claude Security is built to feed into the tools your team already uses. Send findings to Slack, Jira, or any ticketing system via webhooks, or export results as CSV or Markdown for tracking and audit. Documented dismissals carry forward, so triage decisions made in Claude Security stay visible wherever your team works. Can I scan part of a repository, or run scans on a schedule? Yes to both. You can scope a scan to a specific directory, and you can configure scheduled scans for ongoing coverage without manual kickoffs.