{"slug": "anthropic-updates-claude-security-to-scan-code-continuously", "title": "Anthropic updates Claude Security to scan code continuously", "summary": "Anthropic announced on October 21, 2026 that Claude Security, its public beta code-scanning tool, now continuously monitors connected repositories and rescans on every commit instead of on a schedule, tracking each vulnerability until it is marked resolved. The update supports up to eight repositories per project from platforms including GitHub and GitLab, pushes findings into external tools via API and Model Context Protocol connectivity, and is available to Claude Enterprise customers, who can receive up to $25,000 in monthly usage credits for two months through December 31, 2026. Anthropic said Claude Security, in public beta since April 2026, has been used by thousands of organizations that together identified over one million vulnerabilities, and its opt-in OSS Scanner surfaced 493 issues across 25 open-source projects.", "body_md": "Anthropic official brand assets (anthropic.com)\n\n# Anthropic updates Claude Security to scan code continuously\n\nThe public beta tool now rescans repositories on every commit and tracks each vulnerability until it is resolved\n\n[Anthropic](https://cryptobriefing.com/markets/anthropic/) has rebuilt how Claude Security watches your code. The tool now monitors connected repositories continuously and rescans automatically whenever something changes.\n\n## What changed in Claude Security\n\nThe company announced the update on October 21, 2026. The core change is continuous monitoring, triggered by new commits rather than a calendar.\n\nWhen a team first connects a repository, Claude Security runs a deep baseline scan. After that, it switches to lighter scans focused on each new commit. No manual scheduling is required.\n\nThe update also changes how individual findings are handled. Each vulnerability is tracked on its own until it is marked resolved.\n\nWhen Claude Security detects the code change that fixes a flaw, it marks that finding as fixed automatically. If the same issue resurfaces later, the system can reopen it.\n\nProjects can include up to eight repositories from platforms such as GitHub and GitLab. Findings can also flow into external tools through API and MCP connectivity.\n\nMCP, or Model Context Protocol, is a standard for linking AI systems to outside software.\n\nAnthropic positioned the changes as a response to user feedback. The stated goal is coverage that stays current and fits into workflows teams already use.\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\n## Who gets access, and what it costs\n\nThe feature is available in public beta for Claude Enterprise customers. Eligible organizations can receive up to $25,000 in monthly usage credits for two months, with the offer running until December 31, 2026.\n\nClaude Security draws on the full Claude model family, including Claude Mythos. Customers do not need to join Anthropic’s separate Cyber Verification Program to use it.\n\nAlongside the main product, Anthropic is running a parallel beta plugin for Claude Code. It lets developers run local, session-specific scans on particular repositories or individual changes.\n\n## The track record so far\n\nClaude Security entered public beta in April 2026. Since then, thousands of organizations have used it, and together they have identified over one million vulnerabilities.\n\nAnthropic has also been pointing its models at open-source code. The company recently introduced an opt-in OSS Scanner for open-source projects.\n\nThrough that effort, Anthropic addressed vulnerabilities across 25 open-source projects, surfacing a total of 493 issues.\n\n## What this means for security teams\n\nThe most practical shift is timing. Point-in-time scans leave gaps between runs, and code ships during those gaps. Scanning on every commit narrows that window.\n\nAutomatic resolution tracking could also cut down on busywork. Letting the tool confirm fixes against the code itself removes some of that manual checking.\n\nThe reopening feature addresses regression. A fix that quietly gets undone is arguably worse than a known open bug, because nobody is watching for it.\n\nThe eight-repository limit per project may also shape how larger companies organize their rollout. Firms with sprawling codebases could need multiple projects to get full coverage.\n\nThe API and MCP integrations may prove decisive for adoption. Security tools that force teams into new workflows tend to get ignored. Tools that push findings into existing systems have a better shot at sticking.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our\n\n[Editorial Policy](https://cryptobriefing.com/editorial-policy/).", "url": "https://wpnews.pro/news/anthropic-updates-claude-security-to-scan-code-continuously", "canonical_source": "https://cryptobriefing.com/anthropic-claude-security-continuous-scanning/", "published_at": "2026-10-21 19:06:00+00:00", "updated_at": "2026-10-21 19:14:05.909864+00:00", "lang": "en", "topics": ["ai-products", "ai-tools", "ai-agents", "agent-protocols", "ai-safety"], "entities": ["Anthropic", "Claude Security", "Claude Enterprise", "Claude Code", "Claude Mythos", "GitHub", "GitLab", "Model Context Protocol"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/anthropic-updates-claude-security-to-scan-code-continuously", "markdown": "https://wpnews.pro/news/anthropic-updates-claude-security-to-scan-code-continuously.md", "text": "https://wpnews.pro/news/anthropic-updates-claude-security-to-scan-code-continuously.txt", "jsonld": "https://wpnews.pro/news/anthropic-updates-claude-security-to-scan-code-continuously.jsonld"}}