Key Developments

The past week has marked a pivotal shift in prompt engineering, with major developments in both security applications and the evolution of the discipline itself. Anthropic released Claude Code Security alongside Claude Opus 4.6, identifying over 500 previously unknown high-severity vulnerabilities in production open-source codebases. OpenAI quickly followed on March 6th with Codex Security, which scanned 1.2 million commits and discovered 792 critical findings across major projects including OpenSSH, GnuTLS, and Chromium, resulting in 14 assigned CVEs.

Meanwhile, the field is undergoing a fundamental transformation from traditional “prompt engineering” to what industry experts are calling “context architecture.” The role now focuses on helping AI agents understand context and efficiently automate tasks, treating AI models as dynamic resources that must be structured and enriched.

Industry Context

This evolution reflects the maturing AI landscape, where Anthropic’s enterprise market share has climbed to 40% compared to OpenAI’s decline from 50% to 27%. However, regulatory tensions are emerging—the Pentagon has designated Anthropic as a “supply-chain risk” following disputes over guardrails for autonomous weapons applications, potentially costing billions in contracts.

The discipline has split into two distinct areas: casual prompting (accessible to general users as models improve at reading intent) and production context engineering, which requires genuine engineering skills to manage context windows exceeding two million tokens.

Practical Implications

For European developers and businesses, these security-focused AI tools represent a significant opportunity to identify vulnerabilities in critical infrastructure. The shift toward context architecture means organisations need engineers who understand both traditional software development and AI system design.

Salary trends reflect this evolution, with technical prompt engineers commanding €140,000-€210,000 base salaries, while commercial demand has grown 135.8%. The work increasingly resembles pure software engineering rather than creative prompt crafting.

Open Questions

Key uncertainties remain around regulatory frameworks, particularly in the EU where AI Act compliance intersects with these security applications. How will European organisations balance AI-powered security scanning with data protection requirements? Additionally, as the field professionalises, what training pathways will emerge for traditional software engineers transitioning to context architecture roles?

The upcoming PROMPT-SE workshop at EASE 2026 in Glasgow (June 9-12) may provide crucial insights into standardising these emerging practices across European software engineering teams.

Source: Industry Analysis