So far Opus hasn't complained about doing security reviews of my code. Though I never asked it to exploit the vulnerabilities or to produce a PoC.
replybest part is, if you actually know what you're doing, you cna absolutely get it to find bugs/vulns/etc. so it just really about preventing long horizon agentic tasks or people who don't know what they're doing or those who are doing legit non-offensive security sfuff
replyI've learned some of the incantations to get it to find things without being blocked (as often) but I am paying for the product and in my opinion the product has been rendered incomplete and unreliable. I am not going to play games with them or have to hire the NCC Group to find the bugs that Claude is perfectly capable of finding.
reply