The AI That Spooked Wall Street’s Cyber Darlings

Cybersecurity stocks slid sharply last weekend after Anthropic introduced Claude Code Security, an AI capability designed to scan codebases for vulnerabilities and suggest fixes. Shares of companies including CrowdStrike, Palo Alto Networks, Okta, Zscaler, GitLab and JFrog declined following the announcement, with market coverage describing billions of dollars erased in a single session as investors reacted to the product release.

Anthropic described Claude Code Security as “making frontier cybersecurity capabilities available to defenders,” stating that the system can analyze repositories, trace code interactions, identify vulnerabilities, and generate remediation guidance using large language models.

Those functions sit inside application security. Static application security testing tools scan code for known patterns. Software composition analysis tools flag vulnerable dependencies. Remediation workflows guide developers through patching. The overlap between AI-driven detection and traditional AppSec workflows fueled debate among analysts, some of whom argued the selloff overstated competitive displacement risk.

The episode is a noticeable shift in how investors are evaluating cybersecurity companies, with AI capability now central to the discussion.