{"slug": "a-first-look-at-agentic-appsec-agentic-remediation-and-malicious-code-defense", "title": "A First Look at Agentic AppSec: Agentic Remediation and Malicious Code Defense", "summary": "Snyk introduced Agentic AppSec with two new capabilities: Remediation Agent, now in public preview, and Malicious Code Defense, in private preview. The Remediation Agent automatically fixes vulnerabilities and shows a ~14% improvement in fix rates for SAST issues and ~94% for SCA issues in early benchmarks. Malicious Code Defense aims to block malicious packages before they reach code, addressing threats like the August 4 npm compromise of keyv and related packages.", "body_md": "# A First Look at Agentic AppSec: Agentic Remediation and Malicious Code Defense\n\nAugust 4, 2026\n\n0 mins read*The Remediation Agent and Malicious Code Defense are the first two pieces of Agentic AppSec: security that not only surfaces risk, but resolves it and prevents the next ones.*\n\n## Security teams do not have a detection problem anymore\n\nThey have a prevention and remediation problem.\n\nAI agents now write code at machine speed. They produce more of it than any team can review, and current models introduce several times more vulnerabilities per line than human developers.\n\nMeanwhile, every organization already carries years of unaddressed findings. That backlog used to be a cleanup project. Now it is an attack surface, because attackers have gone agentic too. They enumerate backlogs, chain low-severity issues into critical exploits, compromise the software supply chain, and move faster than any human team can respond. Snyk’s own data shows roughly six new vulnerabilities introduced for every one remediated, and agentic development keeps widening that gap.\n\nAgentic AppSec is built to address that gap. Today, we are sharing a first look at its first two capabilities:\n\n**Remediation Agent**, in public preview, which fixes vulnerabilities automatically.** Malicious Code Defense**, in private preview, which stops malicious packages before they reach your code.\n\n## The Remediation Agent: from backlog to fixed, automatically\n\nMost tools hand you a list. The Remediation Agent hands you a fix.\n\nAvailable now in public preview through the Snyk CLI and your agentic development environment (ADE), it works the way an experienced engineer would:\n\nIt triages your open issues by severity and context.\n\nIt creates a fix, tapping into Snyk’s intelligence layer for context like reachability, exploitability, and fix-outcome data.\n\nIt checks whether that fix will break your build using Snyk’s breakability analysis, so upgrades that would break get caught before they ship.\n\nIt applies the right remediation strategy and opens a pull request for your team to review and merge.\n\nYou kick off a run and watch it work. The agent shows what it is doing, the fixes in progress, and the pull requests it produces. No context switching, no manual upgrade math, no backlog triage.\n\nEarly benchmarking shows a ~14% improvement in fix rates for SAST issues and a ~94% improvement in fix rates for SCA issues when embedding Snyk expertise into a frontier model’s context.\n\nThis builds on a remediation track record Snyk customers already know. [LabelBox](/blog/from-two-years-to-two-weeks-how-labelbox-erased-its-security-debt-with-snyks/) turned a two-year security-debt problem into a two-week one with Snyk. [Relay Network](/blog/relay-network-ai-coding-securely-coagentic-development/) cut remediation of a critical vulnerability from more than a week to under 24 hours, and holds a zero critical, zero high-severity posture across its codebase.\n\nThe Remediation Agent takes that same proven approach and runs it autonomously and continuously, so outcomes that once took a focused team now happen on every run.\n\n## Malicious Code Defense: stopping the attack before it ships\n\nFixing what is already in your code is half the job. Keeping malicious code out is the other half.\n\nThis is not a future problem. As we published this, an active supply chain compromise was moving through the npm ecosystem. On August 4, attackers hijacked the release path for [keyv and related packages](/blog/inside-keyv-npm-compromise-preinstall-malware-trusted-provenance-ide-hooks/) and shipped install-time malware across 11 releases, starting with `keyv@6.0.0`\n\n. The malicious code runs from a pre-install hook, so just installing the dependency is enough to execute it. No import, no app start, no vulnerable API call. Hours in, eight of the poisoned versions were still tagged `latest`\n\n. And these are not obscure packages: `keyv`\n\n, `flat-cache`\n\n, and `file-entry-cache`\n\npull hundreds of millions of downloads a month and ride in through everyday tooling like ESLint.\n\nTwo details make this the shape of things to come. The malicious release carried a valid provenance, so the trust signals teams rely on attested a compromised build. And a second execution path planted `.claude`\n\nand `.vscode`\n\nconfig set to fire when a developer or coding agent opens the project, aimed squarely at the AI-assisted workflows more teams now run every day.\n\nAI removes the last bit of friction from attacks like this. On July 30, [Anthropic disclosed](https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals) that during one of its internal security evaluations, a Claude model did the whole thing autonomously. To win a capture-the-flag exercise, it published a malicious Python package to PyPI. The package was live for about an hour. In that window, 15 real systems downloaded and ran it. One belonged to a security vendor whose scanner installs and executes packages to test them. Running the code exposed that vendor’s credentials.\n\n**To be clear: Snyk was not that vendor.** We ran an internal analysis, and our security team found no evidence of the implicated packages across Snyk or the tooling we operate.\n\nMalicious Code Defense safeguards against supply chain compromises like these by analyzing every package requested by your developers or agents. It leverages the Snyk Intelligence layer to identify threats, applies defined policies to manage malicious or potentially malicious packages, and utilizes a secure proxy to block their installation. In addition to preventing compromises, Malicious Code Defense provides organization-wide visibility into install requests.\n\n## What it means for you, and how Snyk helps\n\nToday: find and fix. Snyk flags known malicious and vulnerable dependencies so your team can find and pull them out fast. In the keyv case, Snyk Security Research analyzed the compromised packages without ever installing or executing them, and published the advisory (`SNYK-JS-KEYV-18515941`\n\n), and gave customers a way to detect exposure and keep monitoring as the incident evolved.\n\nNext: prevention. Malicious Code Defense, in private preview, is built to stop this class of attack before a package ever reaches your environment. Design partners get working package install protection out of the box for PyPI and npm, with policies for either a custom cool-down period on new releases or blocking anything flagged by a published malware advisory. Against an incident like Keyv, that is the difference between quarantining a brand-new poisoned version at install time and racing to rip it out after it has already run. It is also designed to analyze packages without executing them, precisely the failure mode that compromised the vendor in Anthropic's incident.\n\n## Where this is going\n\nThe Remediation Agent and Malicious Code Defense are the first two pieces of Agentic AppSec, Snyk’s approach to security that resolves risk and prevents the next one instead of just reporting it. We are introducing them alongside the broadest expansion of the Snyk AI Security Platform to date, including the general availability of [Evo Continuous Offensive Security](/blog/evo-continuous-offensive-security/) and [Snyk Secrets](/product/snyk-secrets/).\n\nInterested in putting a team of security agents next to every engineer? [Talk to your Snyk account representative to get access.](/schedule-a-demo/)\n\n## See Snyk in action\n\nSee why Snyk is the chosen AppSec solution for developers and security teams alike — and what it can do for your team.", "url": "https://wpnews.pro/news/a-first-look-at-agentic-appsec-agentic-remediation-and-malicious-code-defense", "canonical_source": "https://snyk.io/blog/remediation-agent-malicious-code-defense/", "published_at": "2026-08-04 04:00:00+00:00", "updated_at": "2026-08-04 20:30:39.742767+00:00", "lang": "en", "topics": ["ai-agents", "ai-products", "ai-ethics", "ai-policy", "ai-research"], "entities": ["Snyk", "Remediation Agent", "Malicious Code Defense", "Snyk CLI", "LabelBox", "Relay Network", "keyv", "npm"], "alternates": {"html": "https://wpnews.pro/news/a-first-look-at-agentic-appsec-agentic-remediation-and-malicious-code-defense", "markdown": "https://wpnews.pro/news/a-first-look-at-agentic-appsec-agentic-remediation-and-malicious-code-defense.md", "text": "https://wpnews.pro/news/a-first-look-at-agentic-appsec-agentic-remediation-and-malicious-code-defense.txt", "jsonld": "https://wpnews.pro/news/a-first-look-at-agentic-appsec-agentic-remediation-and-malicious-code-defense.jsonld"}}