← Claude Docs

Scan your codebase for vulnerabilities - Claude Code Docs

Claude Docs · July 22, 2026
The Claude Security plugin is a multi-agent vulnerability scanner that analyzes codebases by mapping architecture, building threat models, hunting for vulnerabilities, and independently reviewing findings before generating reports. The plugin runs locally within Claude Code sessions and can scan entire repositories or specific changes such as branch diffs or pull requests, with results stored in timestamped directories. Users can then generate patches for identified vulnerabilities through a review process where independent agents verify each patch before it is delivered for manual application.

Detailed Analysis

Anthropic has released a Claude Security plugin for Claude Code that automates vulnerability scanning through a coordinated multi-agent workflow. Rather than relying on a single AI pass over source code, the plugin orchestrates a team of Claude agents that map a codebase's architecture, construct a threat model, hunt for vulnerabilities, and then independently verify each finding before compiling a report. This layered verification step is notable: findings only surface in the final report after being cross-checked by a separate "verifier" agent, a design choice meant to reduce noise and false positives that have historically plagued automated security tools. The plugin can operate across an entire repository or be scoped to specific changes—a branch diff, a pull request, or a single commit—making it flexible enough for both periodic full audits and pre-merge checks.

The technical requirements reveal how tightly the tool is integrated into Claude Code's existing infrastructure. It requires Claude Code v2.1.154 or later, a paid plan, and Python 3.9.6+ (using only the standard library, so no additional dependencies are installed). It runs locally within a user's session and consumes standard usage-plan limits, distinguishing it from Anthropic's separate Enterprise-tier "Claude Security" managed service, which continuously monitors repositories. Notably, the plugin can reach code the managed product cannot—repositories on GitLab or Bitbucket, or those on networks without inbound connectivity—positioning it as a complementary, more portable option. Anthropic has also taken care to differentiate this tool from other security-adjacent features already in Claude Code, such as real-time security guidance during code generation, the single-pass /security-review command, and pull-request-focused Code Review, suggesting the company is building out a multi-layered security product stack rather than a single monolithic feature.

The output design emphasizes auditability and safety. Every scan writes results into a timestamped directory containing a human-readable Markdown report, a machine-readable JSONL version, and a "revision stamp" recording the exact commit scanned, effort level, and verification thoroughness—explicitly tying each report to the precise state of the code it describes. This is particularly important given that the scans are explicitly nondeterministic: Anthropic acknowledges that two runs on identical code can surface different findings, an implicit admission of the probabilistic nature of LLM-based analysis. The tool also avoids polluting version control by default, using a .gitignore file within its own output directory. When it comes to remediation, patches are drafted in a scratch copy of the repository and reviewed by an independent agent that runs existing tests, ensuring source files remain untouched until a developer manually applies a fix.

This release fits into a broader industry trend of using multi-agent LLM architectures to tackle tasks where single-model outputs are unreliable—splitting labor across specialized agents (mapper, threat modeler, hunter, verifier, patch reviewer) to approximate the checks and balances of a human security team. It also reflects Anthropic's strategy of embedding Claude deeply into developer workflows via Claude Code's plugin ecosystem, rather than positioning AI security tools solely as standalone SaaS products. By offering both a free-tier-accessible local plugin and a paid Enterprise managed service, Anthropic is effectively tiering AI-assisted security auditing much like traditional application-security vendors tier SAST/DAST tooling—except here the "scanner" is a coordinated swarm of language-model agents rather than static rule sets. As AI coding assistants increasingly generate large volumes of code, tools like this signal an industry-wide push toward using AI not just to write code faster, but to police the security implications of that code at comparable speed and scale.

Read original article →