How Deterministic SAST and AI Security Agents Divide the Work: Coverage, Harness Policy and Cost in Snyk VulnBench 2.0
Claude Code's security review feature is competitive with industry-standard SAST tools, which is significant for an AI-native approach. The lack of overlap—they catch different vulnerabilities—suggests they should be used together, not as alternatives. For security teams evaluating tools, this is real data showing AI doesn't replace deterministic analysis yet, but augments it. For builders of security agents, this sets a benchmark you need to beat.