Claude Security now rescans connected repositories as code changes, keeping its list of vulnerabilities current, in public beta on Claude Enterprise
Claude Security now keeps up with your code as it changes. Connect your repositories once. Claude runs a deep first scan, then re-scans as changes land, so findings stay close to the current state of your code. In public beta on Claude Enterprise.
Context
Security scans that update with every change close the gap between point in time audits, when new bugs can ship unnoticed.
Claude Security is Anthropic's tool that scans codebases for vulnerabilities and suggests patches, available in public beta on Claude Enterprise. This update adds continuous scanning and tracking of fixes.
Deep dive
On October 21, Claude posted that Claude Security now keeps up with your code as it changes. Teams connect their repositories once, Claude runs a deep first scan, then rescans as changes land, so findings stay close to the current state of the code. It is in public beta on Claude Enterprise.
Anthropic's article says repositories connect through the Claude GitHub app, including GitHub Enterprise Server, or with an access token from GitLab and other Git providers. After the baseline scan, Claude scans changes based on their risk and complexity rather than on a fixed schedule. A project can hold several repositories, so Claude can catch issues between services, such as a backend that trusts input a client was meant to validate.
The help center says a project can connect up to eight repositories, that each finding goes through multi stage verification to reduce false positives, and that Claude marks findings fixed when the fix lands. Findings can be read through an API or an MCP connector, and teams can move from a finding into a Claude Code session to draft a patch.
The image shows a sample dashboard with 35 open findings, including a critical one where unsigned tokens let anyone sign in as any user.
The update came the same day OpenAI described AI found flaws in PHP, part of a broader push by labs to sell AI for code security.
What to expect next
Watch for Claude Security to leave beta and reach plans beyond Enterprise, and for pricing once it does. Independent comparisons with existing code scanners will show whether its findings are more accurate. Also watch for OpenAI and Google to answer with continuous scanning of their own, and for security teams to report how many real vulnerabilities it catches. Feedback on the eight repository limit per project will show whether it suits large codebases.