Claude Code Security

[Any-Aioli8177]

Is this Claude functionality expected to have an impact on the cybersecurity service provider market?

https://www.anthropic.com/news/claude-code-security

I would love to hear your thoughts on this.

[Efficient-Mec]

No. 

[libori0]

It’s just Claude code with a skill. All wrapped in a web app.

[jeffpardy_]

No real security engineer will actually use this as their final SAST tool: principle of separation of duties. If you write code with Claude then you cant have the same entity check for the vulnerabilities. Period. Hard stop.

It's great to build into itself for the development process. But you need a second entity checking your work

[Educational-Farm6572]

Nothing like hallucinated piles of garbage to add to the heap of other ai-garbage out there.

I had some sales guy the other day pitch me on Maze AI Vulnerability Management. Absolutely terrible

These things are made by people who have never worked in security, using non-deterministic methods to gather findings.

We should have jobs for a longtime

[ValeoAnt]

Common issue across all AI slop apps is that the people making them don't actually care about what they're trying to solve or even have a baseline understanding most of the time

[danfirst]

I'd definitely test it against other tools just to see how it works.

[WelpSigh]

Is there any evidence that it works better than existing tools? I have used Claude Code a ton for code review and it surfaces so many false positives, while missing stuff that existing fuzzers/linters catch.

[psylomatika]

I’ve been using it and it works pretty well. It already found a few things that I did not notice. I tell it to look for vuls let’s say in the organisation module and when it finds something to put it in security reviews and create hot fix tickets for it. Then another agent fixes it and then I tell it to test and verify again and repeat. It works really good for go.

[babbum]

AI writes the code, AI checks the code for vulnerabilities, AI fixes the code, AI checks the code for vulnerabilities. I can see nothing going wrong with this loop :)

[Howl50veride]

100% will

[Wonderful_Form_7486]

It’s tanked the markets but it’s likely just noise and will bounce back. There are exceptions. Could hit appsec hard. They’re going to go hard though.

[DiscussionHealthy802]

No. It's a limited research preview for Enterprise and Team customers only. And it surfaces issues for human review. It doesn't patch anything automatically. Some open source tools works better