Top News

AI startup Anthropic is once again in the news. The company has introduced its new tool, Cloud Code Security, which helps teams find and fix hidden security flaws in software code.

Cloud Code Security: AI startup Anthropic is once again in the news. The company has introduced its new tool, Cloud Code Security, which helps teams find and fix hidden security flaws in software code. The announcement caused a stir in the cybersecurity sector, and the shares of several major companies saw a sharp decline.

Why was the market shaken?

Immediately after the announcement of Cloud Code Security, the stocks of cybersecurity companies were affected. Shares of major industry names like CrowdStrike, Okta, Cloudflare, SailPoint, and Zscaler fell. Investors feared that this new AI-based solution could pose a significant challenge to traditional security tools.

How does Cloud Code Security work?

According to the company, this tool scans any codebase and identifies security vulnerabilities. It not only reports the vulnerabilities but also suggests potential fixes (software patches) that are then verified by human experts.

While traditional static analysis tools find vulnerabilities based on predetermined patterns, Cloud Code Security attempts to understand code almost like a human researcher. It tracks data flow, understands interactions between different software components, and can even identify complex flaws like business logic or access control that rule-based systems often miss.

Protection against AI-based attacks

Anthropic says the tool is specifically designed to protect against new types of AI-based cyberattacks. The company believes that the same capabilities that defenders use to find vulnerabilities can also be exploited by attackers. Therefore, the tool has been designed with both security and risk aspects in mind.

Multi-Stage Verification to Avoid False Alerts

Claude Code Security doesn't present any potential vulnerability as a final result. Every discovery is put through a multi-stage verification process. The AI ​​automatically re-examines its findings, trying to prove them correct or incorrect, and removes false positives. Only then does the report reach human analysts. Furthermore, it rates each vulnerability based on severity so teams can prioritize.

Hundreds of Old Vulnerabilities Revealed

The company claims that its Cloud Opus 4.6 model discovered over 500 vulnerabilities in production open-source code. Many of these bugs had existed for years and had remained undetected despite expert review. Anthropic says it is also using this technology to audit the security of its own systems.

Who will get this tool?

Cloude Code Security is currently released as a limited research preview for enterprise and team customers. The company hasn't yet provided a clear timeline for when this feature will be available to general users.

In the rapidly evolving era of AI, this tool appears to be challenging traditional cybersecurity frameworks. It will be interesting to see how the industry adapts to this change in the future.