Snyk Evo Agentic AppSec: security agents that find, fix, and verify
At a glance
Snyk announced Evo Agentic AppSec (Oct 15): purpose-built security agents (Code Scanning, Dependency Firewall, Agentic Security Review, Remediation) that operate Snyk’s deterministic engines as tools, secure agent-written code at inception and work down existing backlogs, with independent verification—Remediation Agent in open preview; others experimental for select customers. This workflow is listed under agentic-security, AppSec, remediation, supply-chain, enterprise.
Agents / tools
Snyk Evo Agentic AppSec, Evo Remediation Agent, Evo Dependency Firewall, Snyk Code, Snyk Open Source
AISLE October rollout (Oct 14): MCP server puts exploit-proven findings into Claude Code/Cursor so agents fix in-editor; plus an AI package firewall that intercepts npm/PyPI/Cargo installs from humans and coding agents, with cooldown and monitoring mode before enforcement.
Enterprise GA for cg-oci, cg-apk, cg-versions, and cg-api so Claude Code/Cursor agents verify image tags, Wolfi package equivalents, EOL status, and org policy/attestations via browser OAuth or chainctl—server-side caps instead of prompt guardrails.
OSS hooks intercept tool calls before execution across ~14 coding agents; observe/enforce policy, secret cloaking, MCP/skill scan, egress allowlists, and a local dashboard.