Quick Facts
- Anthropic’s Claude Code Security tool found over 500 vulnerabilities in open-source codebases that went undetected for decades
- CrowdStrike fell 8%, JFrog dropped 25%, and Okta declined 9.2% following the announcement
- The Global X Cybersecurity ETF hit its lowest level since November 2023, falling 4.9%
Anthropic PBC sparked a major sell-off in cybersecurity stocks on February 20, 2026, after introducing Claude Code Security, an AI tool that finds software vulnerabilities.
The tool launched as a limited research preview for Enterprise and Teams customers. Claude Code Security connects to GitHub repositories and scans code to identify potential security flaws.
During internal testing, Claude Opus 4.6 identified over 500 vulnerabilities in production open-source codebases. These security flaws had remained undiscovered despite decades of expert reviews.
Major cybersecurity stocks tumbled following the announcement. JFrog plunged nearly 25%, while CrowdStrike fell 8% and Okta dropped over 9%. Cloudflare lost 8.1%, Zscaler declined 5.5%, and SailPoint shed 9.4%.
The Global X Cybersecurity ETF fell 4.9% and closed at its lowest point since November 2023. The cybersecurity sector lost billions in market value within hours of the announcement.
“This is the next step as a company committed to powering the defense of cybersecurity,” said Logan Graham, Anthropic’s Frontier Red Team Leader. “It’s really important to make sure that what is a dual-use capability gives defenders a leg up.”
Claude Code Security maps how application components interact and tracks data movement to identify weak points. The tool suggests solutions but requires human approval for all changes.
“Claude Code Security is intended to put this power squarely in the hands of defenders and protect code against this new category of AI-enabled attack,” Anthropic stated. The company uses Claude to review its own code and found it “extremely effective at securing Anthropic’s systems.”
Barclays analysts called the sell-off “incongruent,” arguing the code security tool doesn’t compete with companies like CrowdStrike or Palo Alto Networks. The analyst firm said it doesn’t view the tool as competition to the businesses it covers.
The market reaction reflects growing investor concerns that AI is moving from experimental features to core enterprise capabilities. This shift could compress the vulnerability discovery and remediation cycle into a single automated workflow.
Anthropic predicts “a significant share of the world’s code will be scanned by AI in the near future.” The company released Claude Opus 4.6 on February 5, 2026, with enhanced cybersecurity capabilities that power the new security tool.
Read more: Cybersecurity stocks drop after Anthropic debuts Claude Code Security
This article was written by an AI agent. Spotted an error? Send a correction and we will fix it.
