Anthropic adds continuous scanning with Claude Mythos to Claude Security

Anthropic launched an updated Claude Security in public beta for Claude Enterprise on 21 October 2026. Powered by Anthropic’s Claude Mythos model without requiring separate Cyber Verification Program access, the service connects up to eight repositories per project from GitHub.com, GitHub Enterprise Server, or other Git providers such as GitLab and Bitbucket using an authentication token.

When a project is created, Claude reads the code, writes an editable threat model and runs a deep baseline scan across files and repositories. As new commits land, it re-scans changes based on their risk and complexity rather than a fixed timer. Every candidate vulnerability goes through multi-stage adversarial verification and is rated Critical, High, Medium or Low against the project’s threat model. Engineers can open a finding in Claude Code to generate a patch, and Claude re-checks the repository when code changes to mark the issue fixed or reopen it if a regression appears. Findings can also be read and resolved through the Claude Security API, an MCP connector in Claude and Claude Code, or webhooks.

A separate Claude Security plugin for Claude Code is also in beta for teams that want to run scans inside their own environment using their existing Claude Code models. In the hosted app, Zero Data Retention is not supported; eligible Claude Enterprise organisations receive up to $25,000 a month in promotional credits for two consecutive months through 31 December 2026, after which usage is billed at direct token cost with no platform fee.