Anthropic just shipped a security guidance plugin and a self-hosted sandbox for Claude. This isn't just another incremental feature drop; it's a clear signal that the next phase of AI development is about hardening the agent stack. The takeaway is that security is moving from a manual review afterthought to a critical, automated first pass, and you should be building your systems accordingly.
what just shipped
Two new security-focused features for Claude were announced: a security guidance plugin and a self-hosted sandbox. The plugin acts as a proactive vulnerability scanner for developers as they write code. Anthropic reported using it internally and seeing a 30-40% decrease in security-related comments on pull requests, suggesting it serves as an effective lightweight first pass before a full human code review.
The second component is a self-hosted sandbox, currently in public beta. This allows Claude Managed Agents to operate within a user-controlled environment, including connecting to a user's private servers. This moves agent execution from a multi-tenant cloud environment to your own infrastructure, a significant change for handling sensitive tasks.
why this matters for your agent stack
