# Is prevention essentially a solved problem?

DevFeed: [Is prevention essentially a solved problem?](<https://devfeed.tech/articles/is-prevention-essentially-a-solved-problem-7988.md>)

Original publisher: [Read original article](<https://snyk.io/blog/is-prevention-solved/>)

Author: Ezra Tanzer

Published: 2026-09-10T04:00:00Z

Content type: opinion

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [AI Development](<https://devfeed.tech/topics/ai-development.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [agent](<https://devfeed.tech/tags/agent.md>), [agentic](<https://devfeed.tech/tags/agentic.md>), [ai](<https://devfeed.tech/tags/ai.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [code](<https://devfeed.tech/tags/code.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [cost](<https://devfeed.tech/tags/cost.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devops](<https://devfeed.tech/tags/devops.md>), [devsecops](<https://devfeed.tech/tags/devsecops.md>), [secrets](<https://devfeed.tech/tags/secrets.md>), [security](<https://devfeed.tech/tags/security.md>), [snyk-code](<https://devfeed.tech/tags/snyk-code.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [snyk-platform](<https://devfeed.tech/tags/snyk-platform.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [vulnerability-insights](<https://devfeed.tech/tags/vulnerability-insights.md>)

## AI overview

The article argues that preventing vulnerabilities in agent-generated code is architecturally understood, but organizations must apply the appropriate controls throughout a changing development lifecycle. It says prompts can influence code but cannot reliably constrain agents, and that earlier security intervention reduces model-token cost, human attention, and the risk of an incorrect fix.

## Source excerpt

Prevention in agent-generated code is architecturally solved--but choosing controls that protect security without slowing development remains the challenge.