# snyk-code Snyk Code is a static application security testing tool that scans source code for vulnerabilities and provides automated fixes. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure DevFeed: [Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure]() Original publisher: [Read original article]() Author: Brendan Hann; David Alessi Published: 2026-04-27T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-code](), [Artificial Intelligence](), [Code](), [Large Language Model](), [LLM evaluation / benchmarking](), [benchmarking](), [Architecture & Design](), [Security](), [Vulnerabilities](), [Fine-tuning]() Tags: [agentic](), [ai](), [application-security](), [architecture](), [article](), [benchmarking](), [code](), [developer](), [enablement](), [engineering](), [evaluation](), [fine-tuning](), [interest](), [java](), [llm](), [python](), [security](), [snyk-code](), [snyk-team](), [vulnerabilities]() ### AI overview Snyk Agent Fix is being upgraded to an agentic architecture that uses dynamic few-shot prompting and Snyk's security intelligence to produce safer, more functional AI-powered code fixes. The article describes full Snyk Code language coverage and a three-tier benchmarking process covering security integrity, functional logic, and golden tests. ### Source excerpt Snyk Agent Fix upgrades to a new agentic architecture for faster, smarter, and more secure AI-powered code fixes. Now with full Snyk Code language coverage and verified remediation. ## DevSecCon 2025 Recap: Securing the AI Revolution Together DevFeed: [DevSecCon 2025 Recap: Securing the AI Revolution Together]() Original publisher: [Read original article]() Author: Ben Desjardins Published: 2025-10-22T23:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [DevSecOps](), [snyk](), [Application Security](), [Security](), [ide](), [Pull Request](), [snyk-code](), [Development]() Tags: [2025](), [ai](), [also](), [blog](), [developer](), [devops](), [devsecops](), [ide](), [interest](), [pmm](), [secure-software](), [security](), [snyk](), [snyk-code](), [snyk-open-source](), [snyk-platform]() ### AI overview This DevSecCon 2025 recap examines how AI is changing software development and security. It covers AI-accelerated DevSecOps, securing code from the first prompt, and managing AI-native application chaos with Evo by Snyk. The article also highlights Snyk capabilities for IDEs, pull requests, Snyk Code, and AppSec governance. ### Source excerpt AI is changing development. Our DevSecCon 2025 recap covers the 3 critical stages: AI-Accelerated DevSecOps, securing code at the first prompt, and taming AI-native app chaos with Evo by Snyk. ## Scan your AI-generated code from Cursor using Model Context Protocol (MCP) DevFeed: [Scan your AI-generated code from Cursor using Model Context Protocol (MCP)]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2025-06-23T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [cursor](), [MCP Server](), [Model Context Protocol (MCP)](), [code security](), [Vulnerabilities](), [interoperability](), [Command-line interface](), [snyk-code]() Tags: [ai](), [ai-assistants](), [application-security](), [awareness](), [blog](), [cli](), [code-security](), [cursor](), [customer](), [developer](), [interoperability](), [mcp-server](), [model-context-protocol-mcp](), [open-source-security](), [related-content](), [security](), [snyk-code](), [vulnerabilities]() ### AI overview This article explains how Snyk's CLI MCP server integrates with Cursor to provide in-agent security for AI-generated code. It describes real-time detection of known vulnerabilities in code and open-source packages, with minimal configuration through MCP interoperability. ### Source excerpt Secure your AI-generated code from Cursor in real-time with Snyk's CLI Model Context Protocol (MCP) server. Detect vulnerabilities and accelerate secure development without compromising agility. ## Building AI Trust with Snyk Code and Snyk Agent Fix DevFeed: [Building AI Trust with Snyk Code and Snyk Agent Fix]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨); Brendan Hann Published: 2025-06-23T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [snyk-code](), [ai security](), [Application Security](), [ai-governance](), [Securing AI](), [Pull Request](), [ide]() Tags: [ai](), [ai-coding](), [ai-governance](), [ai-security](), [application-security](), [auto-remediation](), [autonomous](), [blog](), [code-security](), [compliance](), [developer](), [devops](), [engineering](), [pmm](), [pull-requests](), [sast](), [security](), [snyk](), [snyk-code](), [snyk-platform]() ### AI overview Snyk describes its AI Security Platform, Snyk Code, and Snyk Agent Fix for governing AI-assisted development. Snyk Agent Fix autonomously generates and validates code-security fixes, offering auto-remediation in IDEs and pull requests, while Snyk Code provides SAST, visibility, prioritization, and policy controls. ### Source excerpt Secure and accelerate your adoption of AI coding with pre-screened auto-fixes and autonomous code security for modern, developer-loved SAST. ## Top 5 SAST Auto-fixing Tools and How They Compare DevFeed: [Top 5 SAST Auto-fixing Tools and How They Compare]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨) Published: 2024-10-29T15:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [snyk-code](), [AI Development](), [Security](), [Development](), [Large Language Model]() Tags: [ai](), [awareness](), [blog](), [code](), [development](), [llms](), [pmm](), [sast](), [security](), [security-tools](), [self-hosted](), [snyk](), [snyk-code](), [vulnerabilities](), [vulnerability-detection]() ### AI overview This article examines five SAST auto-fixing tools and explains how AI-powered remediation can reduce the time developers spend fixing vulnerable code. It highlights Snyk Agent Fix, a self-hosted language model trained for vulnerability remediation and integrated with Snyk Code. ### Source excerpt Speed Up Code Remediation with AI-Powered Tools. Learn about the top 5 SAST auto-fixing tools and their features to streamline your development workflow. Discover how Snyk Agent Fix can slash your remediation time by 84% or more. ## Find, auto-fix, and prioritize intelligently, with Snyk's AI-powered code security tools DevFeed: [Find, auto-fix, and prioritize intelligently, with Snyk's AI-powered code security tools]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨) Published: 2024-10-24T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [snyk-code](), [Vulnerabilities](), [Security for AI](), [Large Language Model]() Tags: [ai](), [ai-coding](), [application-security](), [awareness](), [blog](), [code-security](), [llm](), [pmm](), [security](), [snyk](), [snyk-code](), [vulnerabilities]() ### AI overview The article presents Snyk Code's Snyk AgentFix, an AI-powered feature that automatically fixes code vulnerabilities. It explains how Snyk combines developer-first application security, IDE-based detection, intelligent prioritization, and automated remediation to address insecure AI-generated code at scale. ### Source excerpt Snyk Agent Fix is a powerful AI-driven tool that automatically fixes code vulnerabilities. It integrates seamlessly into developer workflows and prioritizes critical issues. By leveraging AI, Snyk Agent Fix offers fast, accurate, and safe auto-fixing, empowering teams to improve application security. ## Snyk Code Improves Contextual Dataflow Analysis for Taint Vulnerabilities DevFeed: [Snyk Code Improves Contextual Dataflow Analysis for Taint Vulnerabilities]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-10-10T05:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk-code](), [code security](), [Vulnerabilities](), [Security]() Tags: [awareness](), [blog](), [code-security](), [data](), [developer](), [devrel](), [feature](), [security](), [snyk](), [snyk-code](), [vulnerability](), [xss]() ### AI overview Snyk Code introduces an improved contextual dataflow view for taint vulnerabilities. The update highlights the critical steps in a dataflow path so developers can assess potential true positives and address security issues more efficiently. ### Source excerpt Snyk Code's enhanced dataflow analysis simplifies vulnerability identification and remediation. Learn how this powerful tool streamlines the security process and saves developers valuable time. ## Identifying insecure C Code with Valgrind and fixing with Snyk Code DevFeed: [Identifying insecure C Code with Valgrind and fixing with Snyk Code]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-09-24T05:00:00Z Content type: tutorial Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [C](), [Static code analysis](), [Memory Leaks](), [Vulnerabilities](), [C++](), [Security](), [snyk-code]() Tags: [analysis](), [awareness](), [blog](), [c](), [c-cpp](), [c-plus-plus](), [code-security](), [developer](), [devops](), [devrel](), [docker](), [how-to](), [memory-leaks](), [memory-management](), [programming](), [security](), [snyk-code](), [vulnerabilities]() ### AI overview This tutorial explains how insecure C and C++ code can introduce memory leaks and other vulnerabilities, and describes using Valgrind and Snyk Code's static code analysis to identify and fix them. It also discusses dynamic memory allocation, memory exhaustion, and relevant MISRA guidance. ### Source excerpt Discover how to secure your C and C++ code with Snyk. Learn about common vulnerabilities like memory leaks and buffer overflows in C and C++ and how Snyk's static code analysis tool can help you identify and fix them. Protect your critical software from security threats. ## How Axel Springer National Media and Tech achieved continuous security with Snyk DevFeed: [How Axel Springer National Media and Tech achieved continuous security with Snyk]() Original publisher: [Read original article]() Author: Nina McClure Published: 2024-09-03T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Vulnerabilities](), [snyk-open-source](), [Application Security](), [snyk-code](), [Static code analysis](), [Infrastructure as code](), [Development](), [Amazon Web Services](), [Containers](), [Open Source]() Tags: [application-security](), [awareness](), [aws](), [blog](), [ciso](), [code-security](), [containers](), [customer](), [customer-featured](), [development](), [devops](), [executive](), [iac](), [interest](), [megawatt](), [open-source-security](), [security](), [shift-left](), [snyk](), [snyk-code](), [snyk-open-source](), [vulnerabilities]() ### AI overview This customer story describes how Axel Springer National Media and Tech adopted Snyk after Log4Shell to help developers find and fix vulnerabilities earlier. It covers the implementation of Snyk Code and Snyk Open Source within existing development processes, alongside developer-managed IaC on AWS and security responsibilities shared across teams. ### Source excerpt Find out how Axel Springer's National Media & Tech business division uses Snyk to empower its developers to find and fix vulnerabilities in their own code. ## A security expert's view on Gartner's generative AI insights - Part 2 DevFeed: [A security expert's view on Gartner's generative AI insights - Part 2]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨) Published: 2024-08-08T05:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Application Security](), [snyk-code](), [snyk](), [Generative AI](), [LLM security](), [Code quality](), [Code]() Tags: [ai](), [application-security](), [awareness](), [blog](), [code-quality](), [devops](), [executive](), [interest](), [pmm](), [sast](), [security](), [snyk](), [snyk-code](), [speed]() ### AI overview This opinion article discusses Gartner's recommendations for specialized generative AI models in cybersecurity. Snyk argues that its security-focused model, used in Snyk Agent Fix and Snyk Code SAST, produces more reliable code fixes because it is trained specifically for security rather than general code functionality. ### Source excerpt A recent Gartner report shows that AI transparency is a common issue in many organizations. Snyk Code's hybrid AI-powered SAST is the secret ingredient for AI security & coding. ## Polyfill supply chain attack embeds malware in JavaScript CDN assets DevFeed: [Polyfill supply chain attack embeds malware in JavaScript CDN assets]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-06-26T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Malware](), [polyfill](), [Security](), [supply-chain-security](), [JavaScript](), [snyk-code](), [Code](), [GitHub]() Tags: [acquisition](), [application-security](), [blog](), [cdn](), [code](), [developer](), [devrel](), [github](), [javascript](), [malware](), [open-source-security](), [polyfill](), [security](), [snyk-code](), [snyk-open-source](), [supply-chain](), [supply-chain-security]() ### AI overview The article reports a JavaScript polyfill supply-chain attack in which malicious code was embedded in assets served through a CDN after the polyfill project and domain changed ownership. It states that more than 100,000 websites may have been affected and explains how Snyk Code custom rules can detect usage of the affected CDN URL in JavaScript or PHP code. ### Source excerpt On June 25, 2024, the Sansec security research and malware team announced that a popular JavaScript polyfill project had been taken over by a foreign actor identified as a Chinese-originated company. ## Snyk Code now secures AI builds with support for LLM sources DevFeed: [Snyk Code now secures AI builds with support for LLM sources]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨); Ranko Cupovic Published: 2024-06-25T13:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [snyk](), [snyk-code](), [Security](), [vulnerability scanning](), [Large Language Model](), [Vulnerabilities](), [AI Development](), [Code]() Tags: [acquisition](), [ai](), [blog](), [code-security](), [coding](), [convert-paid](), [developer](), [devops](), [executive](), [interest](), [llms](), [pmm](), [security](), [snyk](), [snyk-code](), [vulnerabilities](), [vulnerability-scanning]() ### AI overview Snyk Code has been updated to treat data returned by supported LLM libraries as untrusted sources. It performs taint analysis across data flows, detects unsanitized data reaching sensitive functions or stores, and alerts developers to potential security issues in AI-enabled applications. ### Source excerpt Snyk Code can now protect the use of supported LLM libraries in source code to detect any security issues and promptly alert users. Book a live demo. ## 360 degrees of application security with Snyk DevFeed: [360 degrees of application security with Snyk]() Original publisher: [Read original article]() Author: Soumen Mukherjee Published: 2024-04-24T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [snyk-platform](), [Application Development](), [snyk-code](), [Extension](), [ide](), [Vulnerabilities]() Tags: [ambassador](), [application-development](), [application-security](), [awareness](), [blog](), [devops](), [executive](), [extension](), [ide](), [interest](), [security](), [shift-left](), [snyk](), [snyk-code](), [snyk-platform](), [tools](), [vulnerabilities]() ### AI overview This article presents the Snyk platform as a unified approach to application security across the secure development life cycle. It describes how Snyk Code, IDE extensions, and repository scanning help developers identify vulnerable code, shift security left, and reduce the cost and complexity of managing multiple security tools. ### Source excerpt Snyk Ambassador Soumen Mukherjee walks us through the various features of the Snyk platform and how it provides 360 degrees of application security. ## An investigation into code injection vulnerabilities caused by generative AI DevFeed: [An investigation into code injection vulnerabilities caused by generative AI]() Original publisher: [Read original article]() Author: Jack Hair Published: 2024-04-16T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Generative AI](), [Large Language Model](), [Vulnerabilities](), [prompt injection](), [Security](), [Code](), [snyk-code](), [snyk]() Tags: [acquisition](), [ai](), [article](), [awareness](), [blog](), [code](), [code-security](), [devops](), [devrel](), [engineering](), [generative-ai](), [google](), [interest](), [large-language-models-llms](), [openai](), [prompt-injection](), [security](), [snyk](), [snyk-apprisk](), [snyk-code](), [vulnerabilities]() ### AI overview This article investigates security risks arising when generative AI and large language models are used in software. It describes an analysis of more than 4,000 Python repositories using common LLM APIs, focusing on code injection vulnerabilities caused by LLM-derived data. It also explains LLMs, hallucinations, untrusted output, and prompt injection. ### Source excerpt This article looks at the potential security implications of large language models (LLMs), a text-producing form of generative AI. ## How to choose a security tool for your AI-generated code DevFeed: [How to choose a security tool for your AI-generated code]() Original publisher: [Read original article]() Author: Liqian Lim (林利蒨) Published: 2024-01-09T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [code security](), [snyk-code](), [snyk](), [ai-coding](), [Generative AI](), [real-time]() Tags: [acquisition](), [ai](), [ai-code-security](), [blog](), [code-security](), [developer](), [guide](), [ide](), [learn](), [pmm](), [real-time](), [security](), [snyk](), [snyk-code]() ### AI overview This buyer's guide presents five considerations for choosing a security tool for AI-generated code. It emphasizes real-time analysis within the IDE, minimal disruption to developer workflows, speed that keeps pace with AI coding tools, and accuracy that helps address generative AI hallucinations. The article uses Snyk's experience and Snyk Code, powered by DeepCode AI, as examples. ### Source excerpt There are a multitude of considerations when it comes to picking the right security companion for your preferred generative AI tool. Here are the top 5 factors for you to consider when making your selections. ## Kroger's approach to supply chain security DevFeed: [Kroger's approach to supply chain security]() Original publisher: [Read original article]() Author: Brian Piper Published: 2024-01-02T06:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [supply-chain-security](), [open-source-security](), [snyk-code](), [snyk-platform](), [Application Security](), [DevOps](), [sdlc](), [Vulnerabilities]() Tags: [application-security](), [awareness](), [blog](), [customer](), [customer-featured](), [dependencies](), [devops](), [executive](), [megawatt](), [product-security](), [security](), [shift-left](), [snyk](), [snyk-code](), [snyk-platform](), [software-development](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain](), [supply-chain-security](), [vulnerabilities](), [workflow]() ### AI overview The article describes Kroger's approach to securing its large-scale digital software supply chain. Kroger uses a shift-left strategy and the Snyk platform to integrate security into development and deployment workflows, improve developer efficiency, and address risks from open source dependencies and vulnerabilities. ### Source excerpt Recently, Snyk hosted a wine tasting & customer discussion featuring David Imhoff, Product Security Leader at Kroger. The discussion focused on tackling the challenges of securing digital supply chains. ## Accelerate C/ C++ security with Snyk DevFeed: [Accelerate C/ C++ security with Snyk]() Original publisher: [Read original article]() Author: Lauren Place; Marcie Cheung Published: 2023-12-05T14:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [C++](), [c/c++](), [snyk-code](), [Security](), [Vulnerabilities](), [Code](), [Tooling](), [CI/CD](), [Command-line interface](), [ide]() Tags: [acquisition](), [blog](), [c-c-plus-plus](), [c-cpp](), [c-plus-plus](), [ci-cd](), [cli](), [code](), [code-security](), [developer](), [ide](), [pmm](), [pull-request](), [security](), [snyk](), [snyk-code](), [snyk-open-source](), [tooling](), [vs-code](), [vulnerabilities]() ### AI overview Snyk announced general availability of C/C++ support for Snyk Code. The feature analyzes C/C++ source code directly without requiring compilation or a build, provides fast feedback, and integrates with IDE, CLI, Git, pull request, and CI/CD workflows. It also detects vulnerable open source packages and non-compliant licenses, with support for Windows, Linux, desktop, server, web, embedded applications, and frameworks such as Yocto, STL, and Boost. ### Source excerpt Today, Snyk is welcoming C/C++ security into the world of modern development with the general availability of C/C++ support for Snyk Code! ## Manage security issues in Jira with Snyk Security in Jira Cloud DevFeed: [Manage security issues in Jira with Snyk Security in Jira Cloud]() Original publisher: [Read original article]() Author: LaToya Muff Published: 2023-08-09T05:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [snyk](), [atlassian](), [DevSecOps](), [Vulnerabilities](), [snyk-code](), [snyk-container](), [snyk-iac](), [snyk-open-source]() Tags: [acquisition](), [americas](), [application-security](), [atlassian](), [awareness](), [blog](), [cloud-security](), [devops](), [devsecops](), [executive](), [integration](), [jira](), [pmm](), [related-content](), [security](), [snyk](), [snyk-code](), [snyk-container](), [snyk-iac](), [snyk-open-source](), [snyk-platform](), [snyk-security-intel](), [tech](), [vulnerabilities]() ### AI overview Snyk Security in Jira Cloud integrates Snyk Open Source, Snyk Code, Snyk Container, and Snyk IaC with Jira. It helps development and security teams detect, prioritize, track, and resolve dependency, code, container, and infrastructure-as-code security issues. ### Source excerpt Snyk started gradually rolling out the Jira Security App and has significantly improved the functionality and features available to users. Snyk Security in Jira Cloud has quickly become a breakout leader in security in Jira.