Check the locks

Anthropic put out something this week aimed at the people who build software: a tool that reads through code and flags serious security holes before it ever goes live.

A security hole is about what it sounds like — a door somebody left unlocked in the code. Most are honest mistakes, easy to miss, and the kind of thing that quietly lets a stranger read your customer list or slip in through a form on your contact page. You rarely find out until it's already a problem.

The new tool reads the code the way a careful, tireless reviewer would, and points at the risky spots before launch instead of after a break-in. It doesn't replace a human who knows what they're doing — it makes sure the obvious mistakes get caught every single time.

Here's why I'm telling you. You're almost certainly not the one writing the code — but you might be paying someone who is. This kind of check used to be slow, expensive, and specialist work that small projects skipped. Now it's cheap and close to automatic, which means there's no good reason to leave the doors unlocked anymore.

You don't need to understand any of it. You need to know it exists, so you can expect the person building your site or app to be checking the locks before they hand you the keys.