Snyk's VulnBench benchmark found that large language models (LLMs) are not fully repeatable in security reviews: across 300 scans of 10 JavaScript projects with 6 configurations repeated 5 times, 84.8…
Snyk research found six new security issues for every one remediated, prompting the company to launch Remediation Agent in public preview, available at no additional cost to all current Snyk customers…
Snyk's benchmark of ~150 vulnerable code samples in JavaScript, Java, and Python found that out-of-the-box frontier models cluster at 72–75% secure-and-functional fix rates, but Snyk Intelligence (the…
Researchers from MATS, ELLIS Tübingen, the Max Planck Institute for Intelligent Systems, and Snyk demonstrated that encrypted chain-of-thought reasoning traces from OpenAI, Anthropic, and Google APIs …
Aikido Security's 2026 State of AI in Security and Development report found that 90% of organizations using 6-8 security tools experienced an incident, compared with 64% of those using 1-2 tools, and …
Researchers from the ELLIS Institute Tübingen, the Max Planck Institute, MATS, and Snyk demonstrated that encrypted chain-of-thought reasoning from frontier AI models can be replayed into cheaper sibl…
Security researchers from MATS Research, the ELLIS Institute Tübingen, the Max Planck Institute for Intelligent Systems, and Snyk found that Anthropic, OpenAI, and Google use a single global encryptio…
Docker, Snyk, and Keycard launched Agent Baseline v1.0 at Black Hat 2026, a blueprint defining six security outcomes and 35 controls for enterprise agent deployment. The framework addresses risks from…
A 2025 Veracode analysis of over 100 large language models found that 45% of AI-generated code causes known security issues and vulnerabilities, while human review effectiveness drops after 400 lines …
Snyk, Docker, and Keycard released the Agent Baseline, a framework defining six security outcomes and 35 controls for enterprise AI agents, and are seeking public comment. The framework aims to cut th…
Computer scientists at the University of Tübingen, the Max Planck Institute, MATS Research, and Snyk discovered a method to extract hidden reasoning from frontier AI models, revealing that Chinese mod…
A developer's comparison of six enterprise Software Composition Analysis (SCA) tools in 2026 highlights Aikido Security as the strongest all-around pick for teams seeking SCA without a six-figure line…
A developer built BugZ AI, an open-source vulnerability scanner and automated patching engine that generates exact Git patch files to fix security issues. The tool uses Next.js, Convex, Clerk, and AI …
A Snyk security audit of the Agent Skills ecosystem, including Anthropic's Claude and Vercel, found that 36% of all skills contained at least one critical-level security issue, such as malware distrib…
Anthropic shipped the Claude Security Plugin for Claude Code in public beta on July 22, a multi-agent vulnerability scanner that runs in the terminal and finds bugs that rule-based tools like Semgrep …
Snyk's 2026 State of Agentic AI Adoption: Volume II, analyzing 3,044 enterprise environments and 1.39 million repositories, found that counting agents, Model Context Protocol servers, retrieval system…
Snyk's State of Agentic AI Adoption report, based on an analysis of 3,044 enterprise environments and 1.39 million code repositories, found that organizations are building AI systems that combine mode…
Snyk announced the general availability of Evo Continuous Offensive Security (COS) on August 4, introducing autonomous AI-powered application pentesting and AI agent red teaming for continuous applica…
Snyk announced the general availability of Evo Continuous Offensive Security (COS), an autonomous AI-powered pentesting and AI agent red teaming solution that provides validated proof of exploitable v…
At Black Hat USA 2026, Snyk announced the general availability of Evo Continuous Offensive Security (COS), an autonomous, AI-powered pentesting solution designed to close the gap between periodic manu…