Dive Brief:
- Anthropic is enhancing the security capabilities of its agentic coding tool, Claude Code, by adding automated security reviews to identify vulnerabilities and provide the necessary remedies, the AI startup said Wednesday.
- Using a GitHub integration and a new command, developers can run security analyses across the codebase to find potential issues, such as SQL injection risks, authentication flaws or insecure data handling.
- Claude Code will provide explanations of the potential vulnerabilities, and developers can ask the tool to implement fixes. The GitHub integration also enables automatic reviews that are triggered by new pull requests.
Dive Insight:
Coding tools have become commonplace across enterprise environments as leaders look to improve productivity. Gartner projects three-quarters of software engineers will use AI coding assistants by 2028, skyrocketing from the less than 10% of enterprise developers who said they deployed similar tools in 2023.
Vibe coding, one of the tech industry’s latest terms to describe AI-reliant software development practices, has also gained enterprise interest for its ability to democratize the process and speed up initial stages for traditional developers.
The accompanying security implications with AI-powered coding tools, however, have raised concerns. Analysts have warned that the rise of AI coding tools has brought insecure code into production and increased code churn.
Developers have also had to contend with changing expectations as tool usage has grown. More than two-thirds of developers blamed the adoption of AI tools for leaders increasing pressure to deliver projects faster, according to a HackerRank report published in March.
Enterprises remain bullish on AI-supported coding, especially as capabilities improve. Financial services companies, in particular, are widescale adopters with Goldman Sachs touting its 12,000 developers armed with GitHub Copilot and Bank of America’s 17,000 programmers using AI tools.
Other industries have found value in the tools, too. Food industry giant Mondelēz International, for example, has turned to Amazon’s coding tool Q as it looked for ways to alleviate burdens on its tech team during a period of massive systems overhaul.
