>> Fixing the existing backlog only solves half the problem; the other half is cutting the rate at which new vulnerabilities enter the codebase. For that, we recommend scanning at PR time. We built security guidance directly into our development process through a Claude Code plugin, which we’ve released publicly.

This both makes sense and is likely very juicy for their token volume.

Japanese companies and institutions are recently under a wave of cyberattacks. LLM assisted or LLM driven attacks are already the new normal. Mostly off the back of abliterated Chinese LLMs, I'd argue.

Anthropic's 'proof of concept' is interesting but the frontier is evolving far ahead of what's apparent to even niche audiences such as HN.