# Claude Security can now spot vulnerabilities that reappear in code

DevFeed: [Claude Security can now spot vulnerabilities that reappear in code](<https://devfeed.tech/articles/claude-security-can-now-spot-vulnerabilities-that-reappear-in-code-95350.md>)

Original publisher: [Read original article](<https://www.helpnetsecurity.com/2026/10/22/claude-security-continuous-scanning-update/>)

Author: Anamarija Pogorelec

Published: 2026-10-22T11:02:36Z

Content type: news

Language: en

Sources: [Help Net Security](<https://devfeed.tech/sources/help-net-security.md>)

Topics: [code security](<https://devfeed.tech/topics/code-security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [Static code analysis](<https://devfeed.tech/topics/static-code-analysis.md>), [Claude](<https://devfeed.tech/topics/claude.md>)

Tags: [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [ai](<https://devfeed.tech/tags/ai.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [automatic](<https://devfeed.tech/tags/automatic.md>), [changes](<https://devfeed.tech/tags/changes.md>), [claude](<https://devfeed.tech/tags/claude.md>), [claude-mythos](<https://devfeed.tech/tags/claude-mythos.md>), [code](<https://devfeed.tech/tags/code.md>), [code-scanning](<https://devfeed.tech/tags/code-scanning.md>), [cyber-verification-program](<https://devfeed.tech/tags/cyber-verification-program.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [github](<https://devfeed.tech/tags/github.md>), [gitlab](<https://devfeed.tech/tags/gitlab.md>), [models](<https://devfeed.tech/tags/models.md>), [monitor](<https://devfeed.tech/tags/monitor.md>), [monitoring](<https://devfeed.tech/tags/monitoring.md>), [news](<https://devfeed.tech/tags/news.md>), [patches](<https://devfeed.tech/tags/patches.md>), [project](<https://devfeed.tech/tags/project.md>), [repositories](<https://devfeed.tech/tags/repositories.md>), [review](<https://devfeed.tech/tags/review.md>), [scanning](<https://devfeed.tech/tags/scanning.md>), [security](<https://devfeed.tech/tags/security.md>), [service](<https://devfeed.tech/tags/service.md>), [threat-modeling](<https://devfeed.tech/tags/threat-modeling.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

## AI overview

Claude Security's update adds recurring repository scans and tracking that keeps findings aligned with code changes: teams connect repositories, select branches and scope, and Claude runs a baseline scan followed by scans of changes based on risk and complexity. It marks findings fixed when patches land and reopens them if an issue returns. Projects can span repositories and include deployment and security-policy context; Claude generates an editable threat model that informs finding assessment. Findings include severity, an explanation of attacker reach, and sometimes an attack-path diagram. An API, webhooks, and an MCP connector link findings to other workflows, while role-based controls govern access. The service is in public beta for Claude Enterprise customers; administrators enable it and assign access.

## Source excerpt

Anthropic has updated Claude Security with ongoing code scanning and automatic fix tracking to help security teams monitor vulnerabilities as software changes. The service scans codebases for vulnerabilities and suggests patches for review. It is powered by the company's full family of models, including Claude Mythos, without requiring Cyber Verification Program access. Scanning code and tracking fixes Teams create a project, connect repositories through the Claude GitHub app or an access token from GitLab or ... More -> The post Claude Security can now spot vulnerabilities that reappear in code appeared first on Help Net Security.