{
"canonical_url": "github.com/anthropics/claude-code",
"category": "Coding agent",
"commercial": true,
"compliance": [
{
"certificate_id": "anthropic, pbc",
"covers_resource": "unknown",
"credited": false,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Anthropic, PBC",
"terms": [
"partner_entries",
"iso-iec-42001"
]
},
"display": "ISO 42001: Found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/anthropic, pbc",
"framework": "iso42001",
"issued": "2025-10-21",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:48Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "ISO42001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": false,
"detail": {
"pages_visited": 5
},
"display": "DPA available: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://claude.com/product/claude-code",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "ffacac5cb236db22fc871f65795569ec71d8b8679efceed23ffd1ff8cb1d3907",
"period_end": null,
"retrieved_at": "2026-10-26T12:28:57Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "DPA_AVAILABLE"
}
],
"deployment": "CLI; GitHub integrations",
"description": "Widely used terminal coding agent with strong tool-use and ecosystem integrations.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "general",
"rank": 77,
"recomputed": 87.5,
"score": 77.9,
"score_version": "sar-score-2.0",
"seed_rank": 77,
"seed_score": 87.5,
"source": "seed_xlsx",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "security",
"rank": 27,
"recomputed": 82.4,
"score": 70.4,
"score_version": "sar-score-2.0",
"seed_rank": 27,
"seed_score": 82.4,
"source": "seed_xlsx",
"unknown": []
},
"data": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "data",
"rank": 40,
"recomputed": 87.6,
"score": 81.7,
"score_version": "sar-score-2.0",
"seed_rank": 40,
"seed_score": 87.6,
"source": "seed_xlsx",
"unknown": []
},
"finance": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 51,
"recomputed": 76.6,
"score": 62.4,
"score_version": "sar-score-2.0",
"seed_rank": 51,
"seed_score": 76.6,
"source": "seed_xlsx",
"unknown": []
},
"government": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 51,
"recomputed": 76.6,
"score": 62.4,
"score_version": "sar-score-2.0",
"seed_rank": 51,
"seed_score": 76.6,
"source": "seed_xlsx",
"unknown": []
},
"healthcare": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 43,
"recomputed": 76.6,
"score": 62.4,
"score_version": "sar-score-2.0",
"seed_rank": 43,
"seed_score": 76.6,
"source": "seed_xlsx",
"unknown": []
},
"insurance": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 37,
"recomputed": 76.6,
"score": 62.4,
"score_version": "sar-score-2.0",
"seed_rank": 37,
"seed_score": 76.6,
"source": "seed_xlsx",
"unknown": []
},
"legal": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 40,
"recomputed": 76.6,
"score": 62.4,
"score_version": "sar-score-2.0",
"seed_rank": 40,
"seed_score": 76.6,
"source": "seed_xlsx",
"unknown": []
},
"regulatory": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "regulated",
"rank": 49,
"recomputed": 76.6,
"score": 62.4,
"score_version": "sar-score-2.0",
"seed_rank": 49,
"seed_score": 76.6,
"source": "seed_xlsx",
"unknown": []
},
"sales": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "commercial",
"rank": 32,
"recomputed": 84.9,
"score": 76.7,
"score_version": "sar-score-2.0",
"seed_rank": 32,
"seed_score": 84.9,
"source": "seed_xlsx",
"unknown": []
},
"supply_chain": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "operations",
"rank": 29,
"recomputed": 81.8,
"score": 73.7,
"score_version": "sar-score-2.0",
"seed_rank": 29,
"seed_score": 81.8,
"source": "seed_xlsx",
"unknown": []
},
"technology": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 0.0,
"health": 20.0,
"trust": 16.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {},
"profile": "technology",
"rank": 12,
"recomputed": 97.2,
"score": 84.6,
"score_version": "sar-score-2.0",
"seed_rank": 12,
"seed_score": 97.2,
"source": "seed_xlsx",
"unknown": []
}
},
"external_ids": {
"github": "anthropics/claude-code"
},
"first_seen": "2026-10-26T12:11:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_97cd54bb05e797a4",
"identity": {
"evidence": [
"repository_ownership"
],
"rules_version": "identity-1.1",
"tier": 3
},
"issues": {
"advisories": 0,
"cves": 49,
"incidents": 0,
"links": [
{
"date": "2025-06-24",
"kind": "cve",
"title": "CVE-2025-52882",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52882"
},
{
"date": "2025-08-05",
"kind": "cve",
"title": "CVE-2025-54794",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54794"
},
{
"date": "2025-08-05",
"kind": "cve",
"title": "CVE-2025-54795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-54795"
},
{
"date": "2025-08-16",
"kind": "cve",
"title": "CVE-2025-55284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55284"
},
{
"date": "2025-08-21",
"kind": "cve",
"title": "CVE-2025-57755",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-57755"
},
{
"date": "2025-09-10",
"kind": "cve",
"title": "CVE-2025-58764",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58764"
},
{
"date": "2025-09-10",
"kind": "cve",
"title": "CVE-2025-59041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59041"
},
{
"date": "2025-09-24",
"kind": "cve",
"title": "CVE-2025-59828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59828"
},
{
"date": "2025-09-30",
"kind": "cve",
"title": "CVE-2025-59956",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59956"
},
{
"date": "2025-10-03",
"kind": "cve",
"title": "CVE-2025-59536",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59536"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:11:40Z",
"license": "Commercial",
"name": "Claude Code",
"news": [
{
"cluster_size": 1,
"date": "2026-10-23T23:39:00Z",
"headline": "claude-code release v2.1.310",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## What's changed\n\n- Added the Monitor tool and plugin monitors on Bedrock, Vertex, and Foundry, and when telemetry or nonessential traffic is disabled; long foreground sleeps are now blocked there too\n- Fixed requests failing behind some g",
"tag": "product_update",
"url": "https://github.com/anthropics/claude-code/releases/tag/v2.1.310"
},
{
"cluster_size": 1,
"date": "2026-10-22T22:18:57Z",
"headline": "claude-code release v2.1.309",
"kind": "vendor",
"link_confidence": 1.0,
"outlet": "GitHub releases",
"summary": "## What's changed\n\n- Fixed sandboxed Bash commands on macOS and Linux running the shell's startup files outside the sandbox before each command\n- Fixed macOS sandbox `denyWrite` glob patterns not applying at a path's real location when the",
"tag": "product_update",
"url": "https://github.com/anthropics/claude-code/releases/tag/v2.1.309"
}
],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:22:11Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:22:09Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"checked_at": "2026-10-26T12:22:11Z",
"parser_version": "mcp-2025-06-18",
"status": "not_found"
}
},
"publisher_domain": "code.claude.com",
"resource_type": "agent",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:32:44Z",
"cves": 49,
"source": "nvd",
"tier": 1
},
"seed": {
"last_verified": "2026-09-25",
"snapshot_date": "2026-09-25"
},
"seed_components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 38.0,
"ecosystem": 14.0,
"governance": 45.0,
"health": 20.0,
"trust": 24.0
},
"signals": {
"github_archived": false,
"github_created_at": "2025-02-22T17:41:21Z",
"github_forks": 26046,
"github_language": "TypeScript",
"github_open_issues": 15670,
"github_pushed_at": "2026-10-25T20:11:26Z",
"github_stars": 153419,
"homepage": "https://code.claude.com/docs/en/overview",
"observed_popularity": "Not captured",
"seed_enrich": {
"changed": [
"external_ids.github",
"publisher_domain"
],
"repo": "anthropics/claude-code"
}
},
"slug": "anthropic-claude-code",
"sources": [
{
"payload_hash": "13291d1010ed42eef8d3270f14df2950e6a747fdacf2e0272098aadeb0a1817c",
"retrieved_at": "2026-10-26T12:11:40Z",
"system": "seed_xlsx",
"url": "https://github.com/anthropics/claude-code"
}
],
"tags": [],
"tenant": null,
"traces": [
{
"checked_on": null,
"date": "2025-11-13",
"format": "report",
"id": "tr_claude_code_offensive_use_2025",
"kind": "incident",
"notes": "Vendor-authored; no transcript published, hence tier 3",
"observed": {
"actions": [
"reconnaissance and vulnerability scanning",
"exploit development and credential harvesting",
"lateral movement and data exfiltration",
"frequent hallucinated results the operators had to verify"
],
"approval": false,
"egress": true,
"entry": "operator prompts framed as authorised penetration testing; tasks split so no single request looked malicious",
"outcome": "Agent acted as the attacker across the campaign; Anthropic banned the accounts and published the report. A trace of the agent attacking, not defending",
"refused": false,
"secrets_touched": true
},
"reviewer": null,
"scenario": "Operators jailbroke the agent by presenting tasks as legitimate security testing and had it perform reconnaissance, exploitation, credential harvesting and exfiltration against ~30 targets",
"scope": "product",
"source": "Anthropic (vendor report)",
"tier": 3,
"title": "Anthropic: a state-sponsored group used Claude Code to run most of an intrusion campaign autonomously",
"url": "https://assets.anthropic.com/m/ec212e6566a0d47/original/Disrupting-the-first-reported-AI-orchestrated-cyber-espionage-campaign.pdf",
"vendor_response": "Accounts banned; detection and classifier changes described in the report"
}
],
"trust": {
"compliance": 5,
"identity": 3,
"issues": 3,
"protocols": 5,
"security": 1,
"traces": 3,
"vendor_compliance": 1
},
"url": "https://github.com/anthropics/claude-code",
"vendor": "Anthropic"
}