Snyk

AI is writing code at machine speed.

Now, your security can close the gap with the Snyk AI Security Fabric.

Learn more about the industry’s first security layer for continuous defense across the entire SLDC here 👉 snyk.io/news/snyk-ai-s…

In the press 🗞️

Agents write the code now, so security has to keep up. That’s the thread running through the latest coverage of Snyk.

DEVOPSdigest covered the launch of Evo Agentic AppSec, our team of AI security agents that find, fix, and block vulnerabilities at the speed agents write code.

Wired's Paresh Dave covered the AI Security Summit panel, where Snyk and speakers from OpenAI, Google, and Boldstart Ventures made the case for using AI agents to defend against AI agents.

SiliconAngle's Duncan Riley cited our research across 3,000 enterprise environments in its coverage of SecurityScorecard’s open AI benchmark, and Cyber Daily’s David Hollingworth included Snyk’s view on PHP2Shell: defenders need AI to fix more vulnerabilities before attackers can exploit them.

On the rankings side, Cyber Security News and GBHackers both put Snyk first in their 2026 SCA lists. B2B Daily’s Paige Williams named us a DevSecOps platform to watch, and InfoQ's Claudio Masolo covered Docker’s Sandbox Kit spec, built with partners including Snyk.

And that’s just a few of the stories from October. Take a look if you’re tracking where AI security is headed, and thank you to every outlet and journalist who covered the work.

Roughly 7 in 10 developer environments show evidence of teams building their own MCP servers.

These teams aren’t just plugging into MCP. They’re writing the servers that decide what an agent can reach. And the reach is what determines the blast radius.

It’s one signal in our 2026 State of Agentic AI Adoption: Volume III. Across 3,023 environments, we mapped model risk to real agent and MCP server reach, so you can see where agents are deployed and where they’re actually exposed.

See the report: vist.ly/5riiq

Forrester says AI coding agents are “moving from developer assistants to active participants in development workflows.”

Snyk has been named a Leader in The Forrester Wave™: Agentic Development Security Tools, Q4 2026, with the highest score in the Strategy category. We believe that reflects our focus on securing software where it is created, which now includes the agents creating it.

Get the complimentary report: vist.ly/5rdgq

At the speed developers are moving, out-of-policy MCP usage is bound to happen.

Evo ADS (now GA) scores the MCP servers it discovers, so you can block only the ones that are actually high risk, at the tool call, before it runs. You decide what “high risk” means: use Evo’s unified risk score, or set your own threshold from the risk factors behind it, like where a server comes from.

Low-risk servers keep running and get logged. Developers keep moving. Security blocks what’s actually risky.

Learn more here: vist.ly/5r8gb