{"slug": "remediation-agents-demystified-why-fixing-beats-finding", "title": "Remediation Agents, Demystified: Why Fixing Beats Finding", "summary": "Snyk research found six new security issues for every one remediated, prompting the company to launch Remediation Agent in public preview, available at no additional cost to all current Snyk customers in exchange for community feedback. The agent, described by Snyk's Ryan McMorrow as an orchestration layer between developers' models and Snyk's intelligence, provides breakability assessments, package health, reachability scores, SAST fix generation, and ecosystem playbooks to address the bottleneck of fixing rather than finding vulnerabilities.", "body_md": "# Remediation Agents, Demystified: Why Fixing Beats Finding\n\nSnyk Team\n\nAugust 19, 2026\n\n0 mins read*Six** new security issues for every **one** issue remediated.* That's the ratio Snyk research has found, and it's why the [AI Security Engineers Community](/community/) gave an hour of livestream time to fixing rather than finding.\n\n*Remediation Agents Demystified* paired a fireside chat with a live demo. [Gérald Crescione](https://www.linkedin.com/in/geraldcrescione/), head of the global AI Security Engineers community, hosted, with [Ryan McMorrow](https://www.linkedin.com/in/rmcmorrow/), who leads remediation products at Snyk, and [Brendan Hann](https://www.linkedin.com/in/brendan-hann/), senior product marketing manager for Snyk's developer experience and Agentic AppSec solution.\n\n[Remediation Agent](/blog/remediation-agent-malicious-code-defense/), now in public preview, is Snyk’s response to the issue volume problem we’re seeing. As the team continues to build and iterate in public, Snyk is offering [Remediation Agent](/blog/snyk-remediation-agent-in-the-cli/) to all current Snyk customers at no additional cost, in exchange for actionable feedback from the community. This feedback can be shared in [the community's subreddit](https://www.reddit.com/r/AISecEng/).\n\n## Why the fix rate stayed flat\n\nThe coding agents developers now use everywhere optimize for functional code, not secure functional code, so issue volume is climbing while the fix rate stays flat. AppSec tools answered that with deterministic advice: you're on 1.0, the vulnerability is patched in 1.1, so upgrade. Fine as far as it goes, except somebody still has to prove the upgrade didn't break anything, and no tool was doing that on the developer's behalf. Once the jump spans three or four major versions, most teams never found the confidence to merge at all.\n\nHann placed that bottleneck inside a broader shift. AI has created three distinct but related pressures: attacks are now automated with AI; agents write software faster than ever and introduce vulnerabilities at the same pace; and AI is reaching production, often ungoverned. Remediation was always a bottleneck, he argued, but it matters more now because attacker tooling changed shape too. Frontier-class models break out of sandboxes and chain previously ignorable low-severity findings into novel zero-days. The backlog of accepted risks has become an attack surface in its own right.\n\nAgentic AppSec covers that combination: preventative controls, frontier-grade detection, and autonomous remediation, and in Hann's words, equipping teams with a team of agents that can actually run their AppSec program for them.\n\n## Why throwing an LLM at the backlog doesn't work\n\nSnyk researchers did the obvious first: point an LLM at the security backlog and see what happens.\n\nThe model proved extremely enthusiastic and only occasionally right. Developers still had to review every change and reject most of them, which cost about as much time as fixing the issues by hand. A bigger model would have produced more of the same.\n\nThe turn came when the team asked a different question: what if the LLM were given everything Snyk knows? Ten years of application security best practices, ecosystem-specific upgrade knowledge, and hard-won experience of which fixes get merged and which don't.\n\nThat became the Remediation Agent, described by McMorrow as a harness or orchestration layer sitting between the developer's model of choice and a callable intelligence layer that covers every issue and CVE Snyk tracks. On demand, the agent can pull:\n\n**Breakability assessments** for open source upgrades, scoring how likely an upgrade is to break your build, drawn from a database of every package version and every breaking change in it**Package health** and**reachability scores**, including whether the vulnerable code is exploitable in production** SAST fix generation**through Snyk's Agent Fix capability** Ecosystem playbooks**written by Snyk's own security engineers, covering how a senior practitioner would upgrade a transitive dependency or clear a given class of SAST findings\n\nMcMorrow's analogy was that the LLM is being given an open-book test, and Snyk supplies the book. Snyk then grades the agent's homework, re-running scans to confirm the issue is genuinely gone and executing any unit tests in the project to ensure the changes didn't break the build.\n\nThe internal results he shared were a 94% improvement in mergeable SCA fixes and a 13% improvement in mergeable SAST fixes, with the majority of internally generated SAST fixes now merging as-is, at meaningfully lower token cost than the naive approach.\n\nHann added the three patterns Snyk's design partners have had most success with:\n\nBacklog burndown campaigns, clearing the low and informational findings that attackers now chain together\n\nOrg-wide rollouts giving every developer a remediation agent alongside them\n\nUsing the remediation agent in agentic development environments (ADE) to prevent new issues from entering the codebase\n\n## The demo: IDE and CLI\n\nMcMorrow ran the agent live against OWASP Juice Shop and showed both entry points.\n\n### 1. The IDE Path\n\nThe IDE path needs two pieces: a `/snyk-fix`\n\nskill and the Snyk Studio MCP server, both installable with one curl command from Snyk's recipes repo. That gets you the full loop inside Cursor, Windsurf, Antigravity, or VS Code with a Claude plugin, from SAST and SCA scans through intelligence lookup, code changes, re-scan, test run, report, and pull request. On stage, it upgraded a vulnerable `multer`\n\ndependency across a major version, confirmed no breaking API change affected the app's disk storage usage, and updated the lock file.\n\n### 2. The CLI Path\n\nIn the CLI, `snyk fix --agentic --experimental --sca`\n\nis more participatory. It lists every package it believes it can upgrade alongside the current version, the target version Snyk recommends because it clears the most *criticals* and *highs*, and a breakability score. Developers can:\n\nFix everything\n\nFix only the low-breakability items\n\nSelect specific findings\n\nTalk to the agent\n\nMcMorrow demonstrated the last option by asking why a `Glob`\n\nmajor-version jump was rated high risk, and the agent returned the reasoning: a move to a promise-based API, deprecated callback style, path separators becoming escape-only characters, and the `Glob`\n\nclass no longer being an event emitter. It also listed the transitive vulnerabilities the upgrade would resolve. The newest version then uses that same breakability intelligence to make the compensating code changes, turning a high-risk upgrade into a low-risk one.\n\nWhen asked where the rationale comes from, McMorrow explained that the breakability reasoning comes from an analysis of release notes and breaking changes across the open source ecosystem. Design partners have reported few false positives. They're mostly a SAST-side concern, and the agent uses Snyk Code's existing engines to filter them.\n\n## Human in the loop, then human on the loop\n\nEvery path in the demo ended at a pull request. “We're not going and making crazy code changes,” as Hann put it, and the developer retains final sign-off until an agent has earned enough trust for anyone to yolo-merge their work.\n\nSnyk's own teams run the agent from the CLI today, and an autonomous variant is in active development: Snyk spins up a sandbox, installs the agent, pulls in the application code, and returns a finished PR. Snyk's CI pipeline used to stop on net-new vulnerabilities and hand the problem back to the developer; now it generates the fixes instead, and you merge the agent's work alongside your own commit. Engineers, McMorrow reported, love not having to go back in.\n\nHann pointed to “backlog zero” as a realistic target, and to blocking malicious packages and slopsquatting at the developer-machine and organization level. McMorrow argued the long game is control, governance, and trust: moving from a human in the loop to a human on the loop. The distinction is who decides, so in the loop is pair programming with an agent, while on the loop is an agent that decides for itself and knows when to call you. Crescione's addition: that's the emerging job description, AI Security Engineers orchestrating a flock of agents on their behalf.\n\n## Getting hands-on\n\nGetting started takes a [Snyk account](https://app.snyk.io/) and either the CLI or a supported ADE, plus your own model API key, since bring-your-own-LLM is the default for open preview. Open source maintainers can get the whole platform for free through the [Secure Developer Program](/opensource/), which includes a full enterprise license.\n\nFound a fix that misses the mark? Tell us in [r/AISecEng](https://www.reddit.com/r/AISecEng/). Your feedback will help shape where the Remediation Agent goes next as Snyk continues to build and iterate in public.\n\nBOOK A LIVE DEMO\n\n## Secure AI adoption at scale\n\nEvo helps organizations safely adopt and scale AI by providing visibility, governance, and security across AI-driven development and AI applications.", "url": "https://wpnews.pro/news/remediation-agents-demystified-why-fixing-beats-finding", "canonical_source": "https://snyk.io/blog/remediation-agents-demystified/", "published_at": "2026-08-19 00:00:00+00:00", "updated_at": "2026-08-20 13:13:06.166662+00:00", "lang": "en", "topics": ["ai-agents", "ai-products"], "entities": ["Snyk", "Gérald Crescione", "Ryan McMorrow", "Brendan Hann", "Remediation Agent", "AI Security Engineers Community"], "alternates": {"html": "https://wpnews.pro/news/remediation-agents-demystified-why-fixing-beats-finding", "markdown": "https://wpnews.pro/news/remediation-agents-demystified-why-fixing-beats-finding.md", "text": "https://wpnews.pro/news/remediation-agents-demystified-why-fixing-beats-finding.txt", "jsonld": "https://wpnews.pro/news/remediation-agents-demystified-why-fixing-beats-finding.jsonld"}}