Claude Code will soon run in Auto Mode by default. Only Enterprise customers still need to opt in. The change means AI handles even more of the development process on its own.
Auto Mode lets the AI coding tool work on its own without waiting for manual approval at every step. A classifier checks whether an action is dangerous or irreversible and only asks for confirmation in those cases.
Starting August 14, Claude Code will ship with Auto Mode enabled by default for Pro, Max, and Team plans, as Anthropic announced in a blog post. In tests with 1,053 paid testers and internal red-teaming, Auto Mode performed at least as safely as manual approvals, and often better. Teams using Auto Mode also generated about 25 percent more pull requests, meaning they got more work done.
In a controlled study with 1,053 paid testers, human reviewers caught only 13.6 percent of dangerous commands, while Auto Mode caught 89 percent. | Image: Anthropic
Anthropic also says Auto Mode adds a layer of protection against prompt injection attacks, where injected code tries to hijack the agent away from the user's instructions. An independent audit by Trajectory Labs tested 72 attack scenarios ten times each. None of the 720 attempts succeeded against Claude's current models, Fable 5, Opus 5, and Sonnet 5, in Auto Mode. With OpenAI's GPT-5.6 Sol in Codex Auto-Review mode, 5.83 percent of the attacks got through.
