# customer-featured Published articles for customer-featured. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS DevFeed: [Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS]() Original publisher: [Read original article]() Author: Nuno Loureiro; Luis Grangeia Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Vulnerabilities](), [Authorization](), [Software as a service](), [Microservice](), [Microservices](), [Front end](), [API](), [App](), [Artificial Intelligence](), [Trustworthy AI]() Tags: [agent](), [ai](), [api](), [application-security](), [applications](), [attacks](), [autonomous](), [awareness](), [blog](), [customer](), [customer-featured](), [cybersecurity](), [devops](), [enterprise](), [frontend](), [interest](), [microservices](), [saas](), [security](), [vulnerabilities](), [vulnerability-insights](), [web]() ### AI overview Evo Continuous Offensive Security (COS) is presented as an autonomous offensive-security system combining AI pentesting, agent red teaming, and dynamic testing. The article reports a real assessment of a multi-tenant enterprise SaaS application that uncovered 33 confirmed vulnerabilities, including tenant-wide compromise and critical authorization flaws. ### Source excerpt A real Evo Continuous Offensive Security assessment uncovered 33 confirmed vulnerabilities in a multi-tenant enterprise SaaS, including tenant-wide compromise and critical authorization flaws. ## Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira DevFeed: [Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira]() Original publisher: [Read original article]() Author: Jack Ryan Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [AI-assisted coding](), [cursor]() Tags: [agentic](), [ai](), [ai-agent](), [application-security](), [atlassian](), [autonomous](), [awareness](), [blog](), [ci-cd](), [claude-code](), [cli](), [co-created](), [cursor](), [customer](), [customer-featured](), [developer](), [devops](), [devsecops](), [enablement](), [integration](), [interest](), [mcp](), [mcp-server](), [pull-request](), [scm](), [security](), [snyk-platform](), [snyk-security-intel](), [vulnerabilities]() ### AI overview Snyk and Atlassian describe an integration that turns Jira vulnerability tickets into AI-assisted remediation workflows. An agentic development environment retrieves ticket context, generates a fix in a local repository, validates it with a Snyk scan, and can open a pull request. ### Source excerpt Bridge the gap to autonomous fixes. Snyk and Atlassian integrate to transform Jira security tickets into precision fixes using Snyk Studio AI, eliminating context switching and resolving vulnerabilities in minutes. ## Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program DevFeed: [Building AI Security with Our Customers: 5 Lessons from Evo's Design Partner Program]() Original publisher: [Read original article]() Author: Rudy Lai Published: 2026-04-01T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Securing AI](), [Generative AI](), [shadow AI](), [ai security](), [Security](), [Automation]() Tags: [agentic](), [agents](), [ai](), [ai-adoption](), [ai-security](), [application-security](), [aspm](), [automation](), [awareness](), [blog](), [ci-cd](), [compliance](), [customer](), [customer-featured](), [developer](), [devops](), [executive](), [finserv](), [generative](), [generative-ai](), [interest](), [pmm](), [policy](), [retail](), [scale](), [security](), [shadow-ai](), [snyk-apprisk](), [snyk-platform](), [tech]() ### AI overview Snyk shares five lessons from its Evo design partner program for securing generative AI. The article emphasizes discovering AI sprawl and shadow AI, understanding custom AI deployments, replacing static spreadsheets, enforcing governance policies, and using actionable risk intelligence to move AI from chaos to controlled production. ### Source excerpt Learn 5 key lessons from Snyk's Evo design partner program. Discover how AI discovery, risk intelligence, and policy automation help teams secure generative AI and govern AI sprawl at scale. ## Snyk launches Snyk API & Web, a dynamic application security testing solution DevFeed: [Snyk launches Snyk API & Web, a dynamic application security testing solution]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2025-04-22T12:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [snyk](), [API](), [Development](), [Web](), [Application Security](), [Vulnerabilities](), [AI Development](), [Generative AI]() Tags: [agentic-ai](), [ai](), [ai-development](), [ai-security](), [api](), [application-security](), [awareness](), [blog](), [customer-featured](), [developer](), [devops](), [executive](), [pmm](), [security](), [snyk](), [vulnerabilities](), [web]() ### AI overview Snyk announces Snyk API & Web, a dynamic application security testing solution integrated with its Developer Security Platform. The article says it combines Probely's DAST technology with Snyk's SAST, SCA, container, and infrastructure-as-code security engines to address security challenges in modern applications, including APIs connecting applications and large language models. ### Source excerpt Snyk launches Snyk API & Web, an AI-driven DAST engine that helps organizations automatically find and expose vulnerabilities at scale. Deeply integrated in Snyk's Developer Security Platform, Snyk API & Web is the company's answer to securing the complex, AI-powered applications developers are building today. ## Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance DevFeed: [Overcoming AppSec Challenges in FinServ: How CIBC Balances Speed, Security, and Compliance]() Original publisher: [Read original article]() Author: Snyk Team Published: 2025-03-20T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Security, Privacy and Abuse Prevention](), [DevSecOps](), [vulnerability management](), [Artificial Intelligence](), [Automation](), [threat detection](), [cloud-infrastructure](), [Cybercrime]() Tags: [ai](), [application-security](), [automation](), [blog](), [cloud-infrastructure](), [community](), [compliance](), [customer](), [customer-featured](), [data-privacy](), [devsecops](), [executive](), [financial-services](), [finserv](), [interest](), [pci-dss](), [security](), [soc-2](), [threat-detection](), [vulnerability-management]() ### AI overview This article distills a fireside-chat discussion about application security challenges in financial services, featuring Snyk's Field CTO and CIBC's Senior Director of Security Service Management. It covers the tension between rapid innovation and strict compliance, risks from cybercrime, data privacy, cloud infrastructure, third-party services, legacy systems, and modern applications, and the role of automation, continuous security testing, monitoring, DevSecOps, AI-driven tools, and human oversight in vulnerability management. ### Source excerpt Join Snyk's Field CTO, Steven Schmidt, and Mihai Saveschi, Senior Director of Security Service Management at CIBC, for an exclusive fireside chat on the evolving landscape of application security in financial services. ## How Axel Springer National Media and Tech achieved continuous security with Snyk DevFeed: [How Axel Springer National Media and Tech achieved continuous security with Snyk]() Original publisher: [Read original article]() Author: Nina McClure Published: 2024-09-03T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Vulnerabilities](), [snyk-open-source](), [Application Security](), [snyk-code](), [Static code analysis](), [Infrastructure as code](), [Development](), [Amazon Web Services](), [Containers](), [Open Source]() Tags: [application-security](), [awareness](), [aws](), [blog](), [ciso](), [code-security](), [containers](), [customer](), [customer-featured](), [development](), [devops](), [executive](), [iac](), [interest](), [megawatt](), [open-source-security](), [security](), [shift-left](), [snyk](), [snyk-code](), [snyk-open-source](), [vulnerabilities]() ### AI overview This customer story describes how Axel Springer National Media and Tech adopted Snyk after Log4Shell to help developers find and fix vulnerabilities earlier. It covers the implementation of Snyk Code and Snyk Open Source within existing development processes, alongside developer-managed IaC on AWS and security responsibilities shared across teams. ### Source excerpt Find out how Axel Springer's National Media & Tech business division uses Snyk to empower its developers to find and fix vulnerabilities in their own code. ## Snyk sponsors Snowflake Summit DevFeed: [Snyk sponsors Snowflake Summit]() Original publisher: [Read original article]() Author: LaToya Muff Published: 2024-06-04T13:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security]() Tags: [analytics](), [application-security](), [applications](), [awareness](), [blog](), [cloud](), [community](), [customer](), [customer-featured](), [data](), [development](), [devops](), [enablement](), [executive](), [interest](), [monitoring](), [partnership](), [related-content](), [security](), [snyk-platform]() ### AI overview Snyk announces a strategic partnership with Snowflake centered on Reporting and Analytics Powered by Snowflake. The offering is presented as helping customers monitor application security, assess security posture, prioritize risk remediation, and use customizable security-data views. ### Source excerpt We are thrilled to announce the strategic partnership between Snyk and Snowflake,two industry leaders coming together to revolutionize data and application security. ## How Mulesoft fosters a developer-first, shift-left culture with Snyk DevFeed: [How Mulesoft fosters a developer-first, shift-left culture with Snyk]() Original publisher: [Read original article]() Author: Gerald Crescione Published: 2024-04-30T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [developer tooling](), [sdlc]() Tags: [awareness](), [blog](), [container-security](), [customer-featured](), [developer-experience](), [devops](), [devsecops](), [enablement](), [executive](), [megawatt](), [open-source-security](), [security](), [snyk-container](), [snyk-open-source](), [tooling](), [workflows]() ### AI overview The article describes Mulesoft's shift-left DevSecOps approach: give developers contextual security guidance and tooling within their existing feedback loops rather than sending alerts and reports that disrupt their work. ### Source excerpt Learn how Mulesoft facilitates a DevSecOps culture by empowering its developers with fewer context shifts and more velocity. ## How to build a modern DevSecOps culture: Lessons from Jaguar Land Rover and Asda DevFeed: [How to build a modern DevSecOps culture: Lessons from Jaguar Land Rover and Asda]() Original publisher: [Read original article]() Author: Brian Piper Published: 2024-02-21T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [DevSecOps](), [Application Security](), [Tooling](), [Application Development]() Tags: [acquisition](), [awareness](), [blog](), [collaboration](), [customer](), [customer-featured](), [developers](), [development-tools](), [devops](), [devsecops](), [how-to](), [megawatt](), [security](), [snyk-platform](), [tooling]() ### AI overview The article presents lessons from Jaguar Land Rover and Asda on building a modern DevSecOps culture. It emphasizes the continuing importance of people, processes, and tooling, with developer participation in security-tool decisions identified as critical to adoption and secure development. ### Source excerpt Organizations experience different pain points when implementing a DevSecOps culture, but the fundamentals of people, process, and tooling changes remain the same. ## Kroger's approach to supply chain security DevFeed: [Kroger's approach to supply chain security]() Original publisher: [Read original article]() Author: Brian Piper Published: 2024-01-02T06:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [supply-chain-security](), [open-source-security](), [snyk-code](), [snyk-platform](), [Application Security](), [DevOps](), [sdlc](), [Vulnerabilities]() Tags: [application-security](), [awareness](), [blog](), [customer](), [customer-featured](), [dependencies](), [devops](), [executive](), [megawatt](), [product-security](), [security](), [shift-left](), [snyk](), [snyk-code](), [snyk-platform](), [software-development](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain](), [supply-chain-security](), [vulnerabilities](), [workflow]() ### AI overview The article describes Kroger's approach to securing its large-scale digital software supply chain. Kroger uses a shift-left strategy and the Snyk platform to integrate security into development and deployment workflows, improve developer efficiency, and address risks from open source dependencies and vulnerabilities. ### Source excerpt Recently, Snyk hosted a wine tasting & customer discussion featuring David Imhoff, Product Security Leader at Kroger. The discussion focused on tackling the challenges of securing digital supply chains. ## Achieving developer security adoption at Nylas with Snyk DevFeed: [Achieving developer security adoption at Nylas with Snyk]() Original publisher: [Read original article]() Author: Erin Cullen Published: 2023-12-04T13:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [snyk](), [Development](), [Developer experience](), [code productivity]() Tags: [application-security](), [blog](), [customer](), [customer-featured](), [developer](), [developer-experience](), [development](), [executive](), [integration](), [megawatt](), [productivity](), [security](), [snyk](), [snyk-platform](), [software]() ### AI overview The article explains how Nylas used Snyk to increase developer adoption of application security by integrating AppSec tools into developer workflows. It highlights a developer-first approach, improved productivity and trust, faster scans, and supporting initiatives such as the Engineering Salon and Snyk Learn. ### Source excerpt Learn how Nylas leverages Snyk to drive developer security adoption and simplify the integration of AppSec tools into their workflows. ## Black Hat Asia customer panel recap: How to lead DevSecOps adoption DevFeed: [Black Hat Asia customer panel recap: How to lead DevSecOps adoption]() Original publisher: [Read original article]() Author: Brian Piper Published: 2023-09-18T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [DevSecOps](), [Application Security](), [CI/CD](), [Development](), [Security]() Tags: [asia-pacific-japan](), [automation](), [awareness](), [black-hat](), [blog](), [ci-cd](), [collaboration](), [communication](), [culture](), [customer](), [customer-featured](), [developers](), [devops](), [devsecops](), [engineering](), [executive](), [leadership](), [management](), [megawatt](), [people](), [pipeline](), [recap](), [security](), [security-tools](), [teams](), [tech](), [test](), [tips](), [tools](), [work]() ### AI overview This recap of a Black Hat Asia 2023 customer panel presents leadership guidance for adopting DevSecOps. The panel emphasizes gradual cultural change, leadership support, effective stakeholder communication, feedback loops, strategic rollouts, and testing security tools with engineering teams. ### Source excerpt Three experts came together at Black Hat Asia 2023 to discuss how leadership can participate in fostering security success. ## 7 AppSec tips from Snowflake's Director of Product Security DevFeed: [7 AppSec tips from Snowflake's Director of Product Security]() Original publisher: [Read original article]() Author: Brian Piper Published: 2023-08-31T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security]() Tags: [application-security](), [awareness](), [best-practices](), [blog](), [customer](), [customer-featured](), [developer](), [devops](), [devsecops](), [executive](), [megawatt](), [security](), [snyk-platform](), [tech]() ### AI overview Snowflake's product security team shares application-security practices centered on developer empathy, feedback loops, and clearly scoped security champion responsibilities. ### Source excerpt At this year's AWS re:Invent, Mic McCully, spoke with Jacob Salassi, Director of Product Security at Snowflake. Read on to learn about the practices Jacob and his team established to create a successful application security program. ## How Okta empowers devs to find & fix security issues with Snyk DevFeed: [How Okta empowers devs to find & fix security issues with Snyk]() Original publisher: [Read original article]() Author: Mariah Gresham Published: 2023-08-25T13:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [container-security](), [Vulnerabilities]() Tags: [automation](), [blog](), [cloud](), [complexity](), [container-security](), [containers](), [customer](), [customer-featured](), [developer](), [developers](), [devops](), [docker](), [kubernetes](), [megawatt](), [security](), [snyk-container](), [terraform](), [vulnerabilities]() ### AI overview Okta discusses simplifying container-security work for Auth0 developers with Snyk. Its platform automation handles deployment details, while the team aims to make container vulnerabilities easier to find and fix. ### Source excerpt Recorded at AWS re:Invent 2023, learn how Okta uses Snyk to simplify security complexity for Auth0 developers.