Will Foundation Models Kill Security Startups?

About this episode

The episode discusses the implications of Anthropic's Claude Code Security announcement on the AppSec industry and the future of cybersecurity.

Did Anthropic just kill the AppSec industry? Following the announcement of Claude Code Security , a tool that finds, reasons about, and fixes code vulnerabilities, major security stocks dropped by 8% .In this episode of the AI Security Podcast, Ashish and Caleb break down the reality behind the hype. Caleb explains why using AI for SAST (Static Application Security Testing) is "a no-brainer," noting that many open-source projects and startups have already been doing exactly what Anthropic announced . We discuss why this actually validates the shift toward AI-automated remediation.The conversation goes deeper into the future of the cybersecurity market: Will giant foundation models start acquiring security companies? Will they offer "premium gas" (cheaper tokens) for building on their platforms? And most importantly, what does this mean for AppSec engineers whose jobs involve triaging false positives? Questions asked: (00:00) Introduction: The Claude Code Security Announcement(02:50) What is Claude Code Security? (Finding & Reasoning about VULNs) (03:50) Market Overreaction: Why Security Stocks Dropped 8% (05:10) Why AI-Powered SAST is Not New (OpenAI &amp…

People in this episode

Hosts: Ashish, Caleb

Topics covered

• AI in cybersecurity
• AppSec industry
• Static Application Security Testing
• impact of foundation models
• job market for AppSec engineers
• AI-automated remediation

Keywords

• Claude Code Security
• AppSec
• AI-powered SAST
• cybersecurity market
• code vulnerabilities
• AI automation
• security startups

Mentioned in this episode

Organizations: Anthropic, CrowdStrike, OpenAI

Products: Claude Code Security

More episodes of AI Security Podcast

• Why Asset Intelligence is Replacing the CMDB & Static Dashboards · June 11, 2026 · 43 min
• The AI AuthZ Problem: Why Human Least Privilege Fails for Autonomous Agents · June 4, 2026 · 48 min
• Securing AI at the Speed of Engineering | DoorDash | Forward Deployed Security | GRC Engineering · May 21, 2026 · 1h 3m
• Verification vs. Validation: How Autonomous AI is Changing Cybersecurity · May 13, 2026 · 1h 10m
• The Zero-Click AI Hack: How to Contain the Blast Radius of Autonomous Agents · April 29, 2026 · 47 min
• Buy vs. Build AI Security: Why [Box.com](http://Box.com) CISO is Creating their Own Agentic SOC · April 22, 2026 · 47 min