Anthropic released an updated Claude Security on Wednesday, in public beta for Claude Enterprise customers. Instead of one-off scans, the tool now monitors connected repositories continuously: after a deep baseline scan, it rescans code as it changes, based on each change's risk and complexity.

Findings are now tracked individually. When Claude Security detects the code change that fixes a vulnerability, it marks the finding fixed automatically, and can reopen it if the issue resurfaces. The update also adds per-project threat models, multi-repository projects of up to eight repositories — so it can catch issues that live between services — and a new API, alongside a companion Claude Code plugin beta for local, session-specific scans.

Anthropic says that since Claude Security entered public beta in April, thousands of organizations have used it to find over a million vulnerabilities. The product is powered by Anthropic's full model family, including Claude Mythos, with no Cyber Verification Program access required, and eligible organizations get $25,000 in free usage credits per month for two months, on usage through December 31, 2026.