Summary
On July 23, 2026, Anthropic released the Claude Security plugin in beta for Claude Code, letting developers scan recent changes or full repositories for high-severity vulnerabilities directly from the terminal. It reads Git history, traces data flows across files, and reasons about business logic rather than matching patterns, using the same Claude inference teams already run.
What changed
Anthropic released the Claude Security plugin (beta) for Claude Code, adding terminal-driven vulnerability scanning of recent diffs or entire repositories that reads Git history and traces cross-file data flows.
Why it matters
It folds security review into the coding loop where the change is written, shifting vulnerability detection left without a separate SAST tool or CI stage, and positions Anthropic against dedicated code-scanning vendors by using the model's understanding of business logic rather than regex-style pattern matching.
Evidence excerpt
The tool lets teams scan recent changes or full repositories from the terminal ... reads Git history, traces data flows across files, and understands business logic capabilities that go well beyond simple pattern matching.