Claude Code’s new security plugin scans your code before you commit
Anthropic has widened access to the Claude Security plugin for the Claude Code CLI. It checks your changes for vulnerabilities before a commit or runs a full scan across the whole codebase, straight from the terminal on the same Claude inference you’re already running.
Per Anthropic’s docs and the GitHub repo, the plugin looks for issues like injection flaws, unsafe deserialization, and unsafe DOM APIs. Once installed it runs automatically, with no separate command to invoke.
The security-guidance plugin has been in Claude’s official plugin repo since November 2025, and the Claude Security public beta opened on April 30, 2026. This wider rollout follows Anthropic’s real-time cybersecurity work on Opus and Sonnet.
Up next
You can now query the Anthropic Economic Index through Claude, Video
Anthropic wired its Economic Index into Claude: ask which occupations use AI most or which tasks people automate, and answers come straight from the dataset. It tracks occupational exposure and AI task penetration, published on Hugging Face.
Related stories
- Anthropic’s automated reviews now flag 54% of PRs
- Anthropic adds real-time cybersecurity filtering to Opus and Sonnet
- Apiiro finds Claude Code secrets in 1,122 GitHub files
- Email leak stopgap in Claude Code checks only shell calls
- Claude Code agent sat on a Pentagon network for two months
- Backdoored Claude Code builds were limited to Cursor
Comments
No comments yet. Be the first.
Join the conversation
Sign in to leave a comment. It appears after moderation.