How do I verify Claude code is secure?

Verifying Claude-generated code security requires a multi-layer approach. Review the generated code against the OWASP Top 10, cross-reference libraries and APIs with official documentation, deploy to staging, and combine automated scanning with manual review. UNPWNED's currently enabled outside-in Deep Scan runs up to 702 configured checks across 33 coverage scanners plus a supporting endpoint-discovery pass after current ownership proof; source, business logic, and internal authorization remain outside that suite.