Senior Solutions Engineer

Snyk launches Evo Agentic Development Security to police AI coding agents. Cybersecurity company Snyk Ltd. today launched Evo Agentic Development Security, a new layer of its artificial intelligence security platform built to police the autonomous coding agents that increasingly build enterprise software without much human oversight. The product, which Snyk shortens to Evo ADS, aims to govern three things at once: the tools an agent pulls in, the actions it takes while running and the code it generates. It enforces those controls inside the agent's workflow rather than scanning the output afterward. Snyk is pitching the launch as a response to a gap that conventional security tooling was never designed to cover. AI coding assistants have turned into autonomous agents that call external tools, take actions and connect to internal systems through Model Context Protocol servers, plugins and third-party integrations. Most existing tools scan code after it is written and have no view into those connections or into what an agent does at runtime. The company backs the argument with telemetry it collected from nearly 9,700 developer environments. Snyk found that 43% of developers run two or more AI coding environments at the same time and more than half have MCP servers installed, with the most heavily instrumented environment running more than 80 at once. One in 12 developers with MCP servers had a high or critical finding. A separate look at early enterprise design partners found that nearly one in four developers had at least one agent skill installed, averaging 18 each, and that more than one in 10 of those skills referenced external dependencies or externally hosted instructions. Snyk has documented working attacks through the agent toolchain, including a poisoned security scanner that back-doored the LiteLLM library and prompt injection buried in dependencies that agents consume. Evo ADS splits its controls across three stages. It vets the MCP servers, skills and external tools an agent uses before the agent touches them, monitors and enforces policy on what an agent does as it runs and scans and fixes vulnerabilities in AI-generated code as it is created. "Ask a security leader for a complete inventory of the AI agents, MCP servers and skills running across their developer machines and in most organizations that inventory doesn't exist," said Manoj Nair, chief technology and innovation officer at Snyk. "That is the gap Evo ADS closes." Among early users is Relay Network LLC, whose engineering teams run GitHub Copilot, Codex and Windsurf and are moving to Claude Code as their primary coding assistant. The launch rounds out the Snyk AI Security Platform, which now spans Evo AI-SPM for visibility into AI assets and Evo Continuous Offensive Security for simulated attacks. Evo ADS is timed to the AI Engineer World's Fair, where Snyk is the exclusive sponsor of the event's first security track. General availability for Evo ADS is scheduled for June 29. Image: Snyk. A message from John Furrier, co-founder of SiliconANGLE: Support its mission to keep content open and free by engaging with theCUBE community. Join theCUBE's Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities. * 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more * 11.4k+ theCUBE alumni - Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network. About SiliconANGLE Media SiliconANGLE Media is a recognized leader in digital media innovation, uniting breakthrough technology, strategic insights and real-time audience engagement. As the parent company of SiliconANGLE, theCUBE Network, theCUBE Research, CUBE365, theCUBE AI and theCUBE SuperStudios - with flagship locations in Silicon Valley and the New York Stock Exchange - SiliconANGLE Media operates at the intersection of media, technology and AI. Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Its new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

Snyk adds Agentic Development Security to its AI Security Platform: the enforcement layer for the AI agents now building enterprise software. Real-time enforcement across the full agent development lifecycle - governing what agents use, what agents do, and securing the code they generate. June 23, 2026 08:00 ET | Source: Snyk BOSTON, June 23, 2026 (GLOBE NEWSWIRE) - Snyk, the AI security company, today announced Evo Agentic Development Security (ADS), extending security coverage to the AI workforce powering modern software development. Evo ADS secures how software is built in the age of autonomous AI agents - governing what agents use, what they do, and what they generate - in real time, inside the agent workflow, before risks increase. AI coding assistants have evolved into autonomous agents - systems that invoke external tools, take actions, and generate software with minimal human oversight, connected to internal systems through MCP servers, plugins and third-party integrations. Existing security models were built to scan code and artifacts, not to govern the systems creating that code, vet the tools they use, or enforce policy on what an agent does at runtime. Data from enterprise environments confirms the shift is already underway - and publicly documented attacks have already demonstrated working exploits through the agent toolchain itself, from malicious MCP servers to prompt injection embedded in the dependencies agents consume. Autonomous agents have outpaced the security models designed to govern them Anonymized telemetry from nearly 9,700 developer environments reveals how far this shift has already progressed. Forty-three percent of developers run two or more AI coding environments simultaneously, and more than half have MCP servers installed. The most instrumented environments had more than 80 MCP servers running simultaneously. These connections create live access to code repositories, browsers, internal tools and production systems, with no security controls between them. The risk inside that supply chain is very real. One in 12 developers with MCP servers has a high or critical finding. A separate analysis of early ADS enterprise design partner environments revealed the parallel threat in agent skills: nearly 1 in 4 developers has at least one skill installed, averaging 18 each, and more than 1 in 10 skills reference external dependencies or externally hosted instructions. Existing security tools scan code after it is written; they have no visibility into MCP configurations, skills, or what agents do at runtime. Evo Agentic Development Security: enforcement built into the agent execution loop Until now, security teams have faced a false choice: block AI coding agents entirely and sacrifice the productivity gains the business is demanding, or allow them with no visibility into what they're connecting to or what they're doing. Evo ADS introduces a third option: govern them. It introduces a continuous control layer that operates inside the agent workflow - not downstream from it - across three layers of the agentic development lifecycle: * Secure the agent supply chain: Discovers and assesses the MCP servers, skills, and external tools agents pull in - surfacing prompt injection, malicious code patterns, and supply chain risks before agents ever interact with them. * Govern agent behavior: Monitors and enforces real-time policy on what agents do while they operate - blocking destructive actions before they execute, and governing the systems agents access and the workflows they run. * Ensure trusted output: Scans and fixes AI-generated vulnerabilities at the moment of creation - enforcing security at inception rather than in post-production review. One solution. Three layers. Continuous enforcement across every phase of agentic development. Internal AI gateways can provide routing and logging - but they cannot determine whether an MCP server is malicious, whether a skill carries hostile instructions, or whether generated code is actually exploitable. That requires an independent enforcement layer operating across real-world environments at scale. "Ask a security leader for a complete inventory of the AI agents, MCP servers, and skills running across their developer machines - in most organizations, that inventory doesn't exist," said Manoj Nair, Chief Technology & Innovation Officer at Snyk. "That is the gap Evo ADS closes. It discovers what is actually installed, governs what agents do while they run, and validates what they produce. The question is no longer whether your team is using AI agents. It is whether you have a governance layer - and right now, for most organizations, the answer is no." For organizations already deploying AI coding agents, the governance gap is immediate. Relay Network, whose engineering teams run GitHub Copilot, Codex, and Windsurf, and are transitioning to Claude Code as their primary development assistant, embedded Snyk directly into AI-assisted development workflows to enforce security as code is created. "As we expanded our use of agentic development, it opened up a new attack surface," said Brendan Putek, director of DevOps, Relay Network. "We're seeing supply chain attacks, malicious skills and compromised MCP servers riding in on the agent's own toolchain, plus agents taking actions with no guardrails between intent and execution. The blast radius isn't bounded and we're early in the curve. Working with Snyk, we landed on what I think is the right architecture: controls built directly into the agent workflow that govern what an agent uses, executes, and generates." "Agentic development security represents a fundamental shift in how developers think about code," said Oliver Neuberger, Managing Director, EMEA and UKI CMT cybersecurity practice lead, Accenture. "The potential for agents to deliver value is enormous, but their impact demands mindful development and the right guardrails - so enterprises can deploy them securely and with confidence." Availability Evo ADS will be generally available June 29, timed to roll out while Snyk attends the AI Engineer World's Fair, where Snyk is the exclusive sponsor of the event's first-ever security track. The launch means the Snyk AI Security Platform now governs AI across the full software lifecycle, from agents writing code to the models running in production to the applications the agents build. Evo AI-SPM delivers total visibility and machine-speed governance of AI assets. Evo Continuous Offensive Security (COS) simulates attacks to find exploitable vulnerabilities before adversaries do. Evo ADS secures the AI workforce itself - the agents and tools through which software is now created. Together, the three solutions form the AI Security Fabric - the independent validator that makes AI-generated code, AI agents, and AI-native applications trustworthy. About Snyk Snyk, the AI security company, empowers the AI-driven enterprise to develop and secure its future, ensuring organizations can trust AI to innovate without limits. The Snyk AI Security Platform delivers the industry's AI Security Fabric, weaving protection directly into the flow of creation to secure GenAI code, AI-native applications, and agentic systems. By delivering visibility, control, and autonomous defense secure at inception, Snyk enables over 4,800 global customers to build fearlessly in the AI era. Media Contact Tsai-Ni Ku [email protected]

The full Snyk AI Security Platform, free for open source maintainers. June 17, 2026 6 mins read Finding issues is easier than ever. Triaging and fixing them is what's scarce. Through Snyk's Secure Developer Program, open source maintainers get the signal to cut through the noise and the platform to fix what matters, free for their open source projects. And Snyk is going further: the new Snyk Remediation Agent, in open preview in the CLI for design partners, pairs frontier-model reasoning with Snyk's intelligence layer to produce validated, merge-ready fixes, so fixing can finally keep pace with finding. More on that below. The hard part isn't finding bugs anymore. Almost every application we use is built on open source. Industry estimates put it at 80-90% of the average codebase, most of which are transitive dependencies of dependencies that nobody chose on purpose. The security of that foundation rests on open source maintainers, the people who triage the issues, review pull requests, and ship the releases that the rest of the software world depends on. Most OSS maintainers do it for free and do it alone. AI changed the shape of this work. The slop wave that buried maintainers in low-quality, AI-generated reports has largely passed as the models improved. What's left is harder: a flood of real vulnerability reports, often duplicated by different researchers prompting the same models, arriving faster than any one maintainer can triage, rank, or fix. Finding is no longer the bottleneck. Sorting real from noise and shipping fixes is. There is real risk behind that volume. This year, a hijacked maintainer account pushed a remote-access trojan into Axios, a library downloaded close to 100 million times a week, and the same method compromised trusted security tooling and AI infrastructure. Attackers have realized the fastest way into thousands of applications is through one maintainer. And exploit timelines keep shrinking, with Gartner predicting AI will accelerate exploit time by 50% by 2027. What the Secure Developer Program gives you. Supporting open source maintainers isn't new for Snyk. We were built on open source security and have long offered our developer tools free to qualifying open source projects. Today, Snyk secures more than 585,000 open source projects. The Secure Developer Program takes that commitment further. That is where the Secure Developer Program focuses. Not on handing maintainers another scanner, but on the two things actually in short supply: knowing which issues are important, and getting them fixed. Maintainers get the full Snyk AI Security Platform, free, with risk-based prioritization and remediation at the center. We're making maintainers faster than the attackers. That means you can: * Strategically burn down vulnerability backlogs. Open source maintainers should not have to rely solely on severity. Snyk provides context such as exploitability, reachability, asset criticality, and fix efficiency to sequence remediation work. * Action remediation faster, with automated fix pull requests for vulnerable dependencies in Snyk Open Source, including the deep transitive ones that legacy tools miss. * Catch issues in your own code with Snyk Code, fast enough to live in your workflow, agentic or not. * Secure your images and infrastructure config with Snyk Container and Snyk IaC. This is the same platform the largest companies in the world pay for, donated to the maintainers who hold the ecosystem up. All Snyk asks in return is a "Sponsored by Snyk" link on your project page. The program has been running for about a year and is already trusted by more than 60 projects, including Postiz and Arcane. Snyk is putting the fix engine in maintainers' hands too. Finding problems has only ever been half the job. The harder half is fixing them as fast as they arrive, and that is where Snyk is investing now. Snyk Remediation Agent (currently in open preview in the CLI for design partners) pairs frontier-model reasoning with Snyk's intelligence layer to produce validated, merge-ready fixes for Snyk Open Source (SCA) and Snyk Code (SAST) issues. It is experimental with broader coverage in development. The goal is to give maintainers a way to burn down the backlog of real issues faster than attackers can reach them. Our benchmarking shows that providing Snyk context to models improves SCA fix rate by ~94%, and SAST fix rate climbs from 72% merge-ready fixes to 82%. And it reduces token cost by ~61%. This is the power we want to equip the open source community with. If you want to help shape where this goes, maintainers in the program can get early access. Apply today. You secure everyone's software, but you shouldn't have to do it alone. Apply at snyk.io/open-source. Snyk stands with open source. SECURE DEVELOPER PROGRAM Free security for Open Source projects. Are you an open source maintainer? If so, we'd love to support your project by providing you with complimentary access to our industry-leading developer security tooling and infrastructure!