Anthropic Claude Code Security — The Full Story

Fortune's exclusive reveals the architecture: Claude is placed inside a virtual machine with access to debuggers, fuzzers, and standard security utilities, then autonomously maps component interactions and traces data flow. Every finding goes through multi-stage self-verification — Claude attempts to disprove its own findings before they reach human analysts. Logan Graham, Frontier Red Team leader, called it "a force multiplier for security teams." Anthropic acknowledged the dual-use risk and is deploying internal "probes" to monitor for misuse in real time.

The market reaction was severe: CrowdStrike (-8%), Cloudflare (-8.1%), SailPoint (-9.4%), Okta (-9.2%), Zscaler (-5.5%). The Global X Cybersecurity ETF fell 4.9% to its lowest since November 2023. Investors are pricing in the possibility that autonomous AI agents will cannibalize the traditional threat detection market. SiliconANGLE notes this is the first time an AI capability announcement directly crashed an entire market sector.

Alongside the product, Anthropic released claude-code-security-review — an open-source GitHub Action that performs context-aware security analysis on PR diffs. It already has 3,000 stars. Detects 10+ vulnerability categories including SQL injection, XSS, authentication flaws, and business logic issues.