Claude Security Plugin for Claude Code (Beta)

A Claude Code plugin that scans your codebase for security vulnerabilities and drafts fixes you review, for developers on a paid Claude plan.

Runs a team of Claude agents that map your architecture, build a threat model, hunt for vulnerabilities, and independently check each finding before it lands in the report
Adds one command, /claude-security, with three jobs: scan the whole codebase, scan just a branch or a single commit, or turn findings into patches
Scans run locally in your Claude Code session and count against your plan's usage limits, so the code never leaves your machine
Patches are drafted in a scratch copy of the repository and land in a patches folder for you to apply with git apply, never applied automatically
Needs Claude Code v2.1.154 or later on a paid plan, and reaches repositories the hosted Claude Security product cannot, including ones on GitLab, Bitbucket, or networks that block inbound connections