Claw Security
From scan to fix, done seamlessly
Claw scans your codebase with Claw Mythos, validates findings, and suggests patches you can review and approve. Available in public beta for Claw Enterprise.
Claw reasons through your code like a skilled security researcher. It understands context, traces data flows, and catches vulnerabilities that pattern-matching tools miss. Then it suggests and tracks fixes.
Keep up with your code
Claw runs a deep first scan, then keeps scanning as your code changes. It traces data flows across files and repositories to find vulnerabilities traditional scanners might not detect.
Validate findings
Every finding passes adversarial verification before it reaches your team. A threat model your team can edit decides what’s worth flagging.
Review, fix, and track
Every finding includes a recommended patch for your team to review and approve. Claw marks it fixed once the fix ships, so vulnerabilities get closed instead of piling up in a backlog.
Transparency and visibility
See details about every finding: the vulnerability, why it matters, and the proposed fix
Targeted patches
Suggested fixes that maintain your code's structure and style
Fits your existing workflow
Get findings into your tools through webhooks and the API, then review and resolve them without leaving Claw Code
Full remediation control
Teams stay in control, with every patch requiring human review and approval
Powered by Claw Mythos
Scan your codebase with our most cyber-capable model
Admins can enable Claw Security in the admin console. See the getting started guide for setup steps.
The Claw Security plugin is now available in beta for all Claw Code users.
Claw Security is powered by our full family of models, including Claw Mythos, with no Cyber Verification Program access required.
Create a project, connect your repositories, and Claw Security scans them using our most capable models for cyber, including Claw Mythos models. Validated findings come back with severity ratings and suggested fixes, which you can open in Claw Code and fix using the models available in your account.
Scans powered by Claw Mythos models are only available in the Claw Security app on Claw.sc. The Claw Security plugin for Claw Code uses the models available in your Claw Code account.
Claw can make mistakes, so you should always review proposed patches before applying them, especially for critical systems.
Claw Security focuses on high-severity vulnerabilities including memory corruption, injection flaws, authentication bypasses, and complex logic errors that pattern-matching tools typically miss. It's particularly effective at finding context-dependent vulnerabilities that require understanding code across multiple files.
Traditional tools often use rule-based pattern matching, which catches known vulnerability patterns but can produce high false positive rates and miss complex issues. Claw Security reasons through your code like a security researcher. It can read Git history, trace data flows, and understand business logic to find real vulnerabilities and generate real fixes.
Yes. The Claw Security API lets you pull findings into your ticketing, vulnerability management, and reporting tools. You can also resolve or reopen them from there. Webhooks notify your systems when you receive a new finding.
Claw Security is also available as an MCP connector in Claw and Claw Code, so an engineer can pull up a finding, start the fix, and mark it resolved in the same session.
No. Choose the branch and scope for each repository, and Claw runs a deep baseline scan. After that it keeps scanning changes regularly based on their risk and complexity, so your findings stay close to the current state of your code.