Anthropic’s AI Security Tool Triggers 24% Drop in Cybersecurity Stocks

Quick Facts

• Anthropic launched Claude Code Security on February 20, finding over 500 vulnerabilities in production codebases that had gone undetected for decades
• Cybersecurity stocks plummeted with JFrog down 24%, CrowdStrike falling 8%, and the Global X Cybersecurity ETF dropping 4.9% to its lowest since November 2023
• The AI tool reasons about code like a human security researcher rather than using static rules, targeting memory corruption and injection flaws

Anthropic PBC’s launch of Claude Code Security triggered a massive sell-off in cybersecurity stocks as investors grappled with the implications of AI-powered vulnerability detection. The tool, available as a limited research preview in Enterprise and Teams editions, demonstrates capabilities that threaten traditional security approaches.

The market reaction was swift and severe. JFrog shares dropped 24% while GitLab declined over 8%. Major cybersecurity players saw significant losses with CrowdStrike falling 8%, Cloudflare down 8.1%, Zscaler dropping 5.5%, SailPoint shedding 9.4%, and Okta declining 9.2%.

Claude Code Security’s performance justifies investor concerns. Using Claude Opus 4.6, Anthropic’s team discovered over 500 vulnerabilities in production open-source codebases. These bugs had evaded detection for decades despite years of expert review.

The tool operates differently from existing security solutions. Rather than relying on static rules, it “reasons about your code the way a human security researcher would,” according to Anthropic. The system maps how application components interact and traces data movement to identify potential weak points.

Claude Code Security targets high-severity vulnerabilities including memory corruption, injection flaws, authentication bypasses, and complex logic errors that pattern-matching tools typically miss. Every finding undergoes multi-stage verification to ensure high-fidelity results and minimize false positives.

“Claude Code Security is intended to put this power squarely in the hands of defenders and protect code against this new category of AI-enabled attack,” Anthropic stated. The company expects “a significant share of the world’s code will be scanned by AI in the near future.”

The announcement builds on Anthropic’s August 2025 addition of basic security review features to Claude Code, including terminal-based scanning and automated GitHub pull request reviews. This latest release represents a substantial advancement in AI-powered security analysis.

Barclays analysts called the cybersecurity sector selloff “incongruent,” stating they don’t view the code security tool as competition to covered businesses. However, market participants expressed concern that AI tools finding decades-old bugs could diminish the value of existing enterprise security suites.

The sell-off reflects broader software sector volatility as generative AI transitions from experimental feature to core enterprise functionality. The iShares Tech Software ETF has dropped over 23% year-to-date, approaching its largest quarterly decline since the 2008 financial crisis.

Anthropic acknowledges the dual-use nature of the technology. “Attackers will use AI to find exploitable weaknesses faster than ever,” the company warned. “But defenders who move quickly can find those same weaknesses, patch them, and reduce the risk of an attack.”

Read more: Cybersecurity stocks drop after Anthropic debuts Claude Code Security