Snyk launches Evo Agentic AppSec, a team of AI agents that find and fix security flaws in code
The agents run Snyk's existing scanners as tools instead of replacing them. Evo Code Scanning Agent looks for access-control and login logic flaws; Evo Dependency Firewall blocks malicious or out-of-policy packages at install time, including package names AI agents make up; Evo Agentic Security Review reviews a whole repository against a threat model; and Evo Remediation Agent writes fixes, holding any that might break the build for approval. Remediation Agent is in open preview; the scanning, firewall and review agents are an experimental preview for select customers. The benchmark numbers in the announcement are Snyk's own.
How you’d use it: Block made-up or malicious packages before your coding agent installs them.