Anthropic ships security-guidance plugin for Claude Code

// 1h agoPRODUCT UPDATE

Anthropic ships security-guidance plugin for Claude Code

Anthropic released a security-guidance plugin for Claude Code that identifies and fixes vulnerabilities natively during development. The plugin operates on file edits, model turns, and commits, and supports custom organizational rules via a repository markdown file.

// ANALYSIS

This plugin shifts security left into the AI coding assistant itself, reducing PR noise and catching vulnerabilities before human review.

–Anthropic reports a 30-40% decrease in security comments on PRs internally after using the plugin.
–Multi-level review (edits, model turns, commits) ensures continuous validation rather than a single pass.
–Support for org-specific `claude-security-guidance.md` files allows custom policy enforcement alongside built-in checks.
–Highlights a growing trend of AI devtools focusing on security and enterprise compliance.

// TAGS

claude-codeai-codingdevtoolsecuritycode-reviewguardrails

DISCOVERED

1h ago

2026-05-26

PUBLISHED

1h ago

2026-05-26

RELEVANCE

8/ 10

AUTHOR

ClaudeDevs

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

UPDATE59m ago

Bun boosts hex buffer parsing speed by 4.8x

The upcoming version of the Bun runtime will include a significant performance improvement, making Buffer.from(str, "hex") 4.8x faster than its current implementation.

UPDATE1h ago

Lakebed Feature Powers Agent-Built Apps

Lakebed quietly added a new feature, and an agent immediately found it and used it to spec in a shipped app. The reaction is less about the app itself than the fact that the platform’s undocumented capability was discoverable and usable by an agent without human prompting.

UPDATE1h ago

Cursor Composer 2.5 autonomously sources and integrates 3D models

A developer successfully used Cursor Composer 2.5 to find and integrate a 3D boat model into an ocean simulator codebase in a single pass, demonstrating its advanced capability to fetch external assets and write the necessary integration code seamlessly.