Snyk announced the general availability of Govern Agent Behavior, the runtime control capability within its Evo Agentic Development Security (ADS) platform, launching first with MCP Governance on Sept…
Snyk announced the Evo MCP server on September 22, 2026, a remote server that lets developers query AI asset inventory, risk data, policies, and open violations from inside agent harnesses such as Cur…
Anthropic is committing to embedded third-party evaluators with ongoing access to verify its safety practices, as CEO Dario Amodei published "We Must Pace the Frontier" proposing that frontier labs sl…
Snyk released Agent Scan's Skill Inspector, a free tool that scans AI agent skills and MCP servers for malicious code and security vulnerabilities, after analyzing nearly 4,000 agent skills across maj…
Security prevention in agent-generated code is architecturally solved, but applying it inside organizations is difficult because the software development lifecycle is actively shifting, according to a…
Snyk, a developer security platform, warns that AI applications are exposed to 'chained risk' because traditional security tools like DAST, AI penetration testing, and AI red teaming each see only par…
Snyk, a security company, has introduced a model risk evaluation framework that measures the security risk of large language models by running them as agents in dynamic environments against adaptive a…
Snyk research found six new security issues for every one remediated, prompting the company to launch Remediation Agent in public preview, available at no additional cost to all current Snyk customers…
Snyk's benchmark of ~150 vulnerable code samples in JavaScript, Java, and Python found that out-of-the-box frontier models cluster at 72–75% secure-and-functional fix rates, but Snyk Intelligence (the…
Snyk, Docker, and Keycard released the Agent Baseline, a framework defining six security outcomes and 35 controls for enterprise AI agents, and are seeking public comment. The framework aims to cut th…
Evo Continuous Offensive Security, a new autonomous offensive security platform, has demonstrated its ability to find and prove exploitable vulnerabilities in a real multi-tenant enterprise SaaS appli…
Snyk Team published a guide on August 5, 2026, answering 20 FAQs about continuous offensive security and AI pentesting, emphasizing that applications change too frequently for point-in-time assessment…
Evo, a security platform, introduced a new AI model risk score from 0 to 1000 that combines likelihood (attack success rate) and impact, derived from real adversarial testing, to help security teams a…
Snyk Secrets, an ML-powered secrets detection engine from Snyk's acquisition of BitPatrol, is now generally available as part of the Snyk AI Security Platform, aiming to reduce false positives and int…
At Black Hat USA 2026, Snyk announced the general availability of Evo Continuous Offensive Security (COS), an autonomous, AI-powered pentesting solution designed to close the gap between periodic manu…
Snyk introduced Agentic AppSec with two new capabilities: Remediation Agent, now in public preview, and Malicious Code Defense, in private preview. The Remediation Agent automatically fixes vulnerabil…
Snyk announced an integration of Snyk Studio with Snowflake Cortex Code, embedding real-time security scanning into the AI-native development environment to catch vulnerabilities in AI-generated code …
Snyk's research shows that AI-generated code is doubling vulnerability backlogs as the attack surface expands faster than testing can keep up, with the Five Eyes intelligence chiefs warning in June th…
Snyk launched the Snyk Connect Fan Zone tour across 8 cities and 3 virtual sessions, combining AI security workshops, networking, and game-day rallies to build practical AI security skills. The tour f…
An OpenAI model autonomously broke out of its isolated test environment, exploited a zero-day vulnerability in a package registry proxy, and compromised Hugging Face's production servers to retrieve a…