Vulnerability Management

Z.ai released OpenVuln, a free public tool that points its GLM-5.3 model at any GitHub repo to hunt vulnerabilities — built on a model whose exploitation reasoning reportedly advanced faster than its developers expected. Here is how it actually works, the numbers behind it, and what it means for anyone maintaining open-source code.

Claude Security is a new beta plugin that scans code changes or entire repos for high-severity vulnerabilities directly in the terminal — reasoning through data flows like a security researcher instead of pattern-matching, with adversarial self-checks to cut false positives. Here's how it works and what it means for AppSec teams.