Issue with Opus is that you can’t do regular pr reviews where you say please try find security issues at best there is silent refusal and worst you get downgrade.
Issue with Opus is that you can’t do regular pr reviews where you say please try find security issues at best there is silent refusal and worst you get downgrade.
So far Opus hasn't complained about doing security reviews of my code. Though I never asked it to exploit the vulnerabilities or to produce a PoC.
Thing is that it does it silently, I only noticed this because randomly opencode summaries were something like sorry I can’t summarise this.
best part is, if you actually know what you're doing, you cna absolutely get it to find bugs/vulns/etc. so it just really about preventing long horizon agentic tasks or people who don't know what they're doing or those who are doing legit non-offensive security sfuff
I've learned some of the incantations to get it to find things without being blocked (as often) but I am paying for the product and in my opinion the product has been rendered incomplete and unreliable. I am not going to play games with them or have to hire the NCC Group to find the bugs that Claude is perfectly capable of finding.