Cyber Software: Claude Code Security is not an existential risk
Summaries are public. PDF access requires an active membership; all members have the same access. Sign in
Key Views
Claude Code Security targets a narrow code security niche, competing with vendors like Snyk, SonarSource, Checkmarx, and Veracode. It shares neither technical overlap nor budget displacement risk with endpoint security, SSE, identity, or network security platforms. Over 80% of breaches stem from human factors such as identity theft or credential compromise, which code security tools cannot address. Of the remaining 20%, most involve operational errors like misconfiguration or patching failures, leaving only a negligible fraction attributable to code vulnerabilities.
Outlook
OpenAI's Trusted Access for Cyber beta may trigger renewed investor concern, but Bernstein views it merely as a CASB interface and not a threat to standalone vendors. If infrastructure platforms could dominate pure-play cybersecurity, Microsoft, Google, or Cisco would have done so already.
Recommended Securities
Bernstein maintains all models, target prices, and ratings unchanged. Outperform-rated names include Okta ($129 target), Palo Alto ($209), GitLab ($70), and SentinelOne ($21). Market-Perform ratings apply to CrowdStrike ($353), Cloudflare ($146), and Fortinet ($83).