# Security benchmark finds combined static and AI reviews catch 101 of 108 flaws

_Published Saturday, October 31, 2026 at 11:06 AM EDT · Science, Security · Latest · Tier 2 — Notable_

A preprint evaluating security tools found that combining Snyk Code with Claude Code using Opus 5 at xhigh effort detected 101 of 108 reference vulnerabilities. Individually, the tools found 89 and 85 respectively. The benchmark covered 20 open-source web applications and credited findings only when they identified both the attacker-controlled input and the dangerous operation within two lines.

The study also found that review policies and file selection affected detection. Without Claude Code's built-in review policy, the same model matched 16 rather than 9 vulnerabilities in restricted classes in a supplementary run. That run covered 19 of the 20 applications.

## Sources

- [cs.AI updates on arXiv.org](https://arxiv.org/abs/2610.38617)

---
Canonical: https://techandbusiness.org/newswire/s6lDpBFVBZU2oHmwhMuzgQ
Published: 2026-10-31T15:06:33.676Z
Story chronology: 2026-10-31T04:00:00.000Z
Retrieved: 2026-10-31T17:44:43.210Z
Publisher: Tech & Business (techandbusiness.org)