Anthropic appears to be quietly preparing its code security scanner for a much wider audience. A new "Security" entry has surfaced in the Claude navigation bar, tucked right alongside Claude Code and Claude Design. It's still hidden from the default view, but that prominent placement suggests the company is getting ready to elevate what's been an enterprise-only tool.
Until now, Claude Code Security has been locked behind a paywall, available only to Enterprise and Team customers as a limited research preview. It launched back in February after internal testing with the Opus 4.6 model uncovered over 500 previously unknown vulnerabilities in production open-source code. A public-facing Security tab would be a big shift—putting the scanner directly in front of individual developers for the first time, no sales call required. (See: (See: Why Anthropic Pulled Its Most Advanced AI: The Dangerous Rise of 'Claude Mythos') Why Anthropic Pulled Its Most Advanced AI: The Dangerous Rise of 'Claude Mythos')
From what we can see in the surfaced build, the workflow treats each connected repository as its own project. Automated scans would run periodically in the background, with an option to trigger manual scans on demand. Findings get reported inside the Security tab, and the system can even draft pull requests with proposed patches for human review before anything gets merged.
That mirrors the architecture already available to Team and Enterprise accounts through the /security-review command and GitHub Action. The difference? This version packages everything into a consumer-friendly dashboard instead of forcing you into a terminal or CI pipeline.
Who stands to gain the most? Individual developers, open-source maintainers, and smaller studios without dedicated application security budgets. Based on how Anthropic has rolled out previous Claude Code features, access will likely open first to Max subscribers on the $100 and $200 tiers—priority access to new capabilities is already part of their value proposition. It might trickle down to Pro subscribers later.
The move fits neatly into Anthropic's broader strategy to position Claude Code as a full development environment, not just a coding assistant. Having built-in scanning and remediation creates a necessary defensive layer against the flood of AI-generated code the same product is helping to produce.