Why Restricting AI Code Security Tools Is the Wrong Answer — and What AppSec Programs Actually Need

Chris Wysopal explains why he signed the Free Fable letter at freefable.org and argues that restricting a single U.S. AI model like Anthropic’s Claude Fable 5 does not remove the underlying capability when comparable models exist globally. He advocates building a security control plane that combines SAST, SCA, secrets scanning, container analysis, and DAST operating at development velocity, regardless of which AI generated the code.