TL;DR

Cybersecurity stocks suffered a sharp selloff after Anthropic introduced a new security feature in Claude that scans codebases for vulnerabilities and suggests patches. CrowdStrike fell 8%, Cloudflare dropped 8.1%, and Okta declined 9.2%. The Global X Cybersecurity ETF closed at its lowest since November 2023.

What Anthropic Announced

The new tool, available in a limited research preview, scans codebases for security vulnerabilities and suggests targeted software patches for human review. While still in early access, the announcement was enough to trigger a broad sector selloff, reflecting mounting investor anxiety about AI-native companies eating into established software markets.

A Wider Software Rout

The cybersecurity drop is part of a larger pattern. The iShares Expanded Tech-Software Sector ETF is down more than 23% this year, on track for its biggest quarterly percentage decline since the 2008 financial crisis. Much of the selling has followed new AI tool releases from Anthropic, OpenAI and Alphabet.

Dennis Dick, head trader at Triple D Trading, said: “There’s been steady selling in software, and today it’s security that’s getting a mini-flash crash on a headline. This kind of market is scary for investors, because things are just moving relentlessly to the downside as soon as you get a hint of disruption.”

Investors are concerned that “vibe coding” — using AI to write software — will allow users to create their own applications, reducing demand for legacy products and putting pressure on growth, margins and pricing power.

Not All Bad News

Jefferies analyst Joseph Gallo expects cybersecurity will ultimately be a net winner from AI, but warned that “headline headwinds are likely to intensify before clarity and cyber inflection from securing AI materialises.” The broader implication is that AI providers will announce more products and compete for cybersecurity budget.

Looking Forward

The selloff illustrates how quickly AI announcements can reshape investor sentiment across entire sectors. For cybersecurity firms, the challenge is demonstrating that AI is an opportunity — securing AI systems — rather than a threat to their core business model.