August 2026 Summaries

At Black Hat USA 2026, Snyk announced the general availability of Evo Continuous Offensive Security (COS), an AI-powered pentesting solution designed to keep pace with the rapid development and attack cycles enabled by AI technologies. This autonomous security system addresses the gap between traditional, infrequent pentesting and the constant threat landscape AI presents by focusing on architectural and business-logic vulnerabilities that conventional scanners often miss. COS operates continuously, leveraging insights from Snyk’s comprehensive AI Security Platform to identify and exploit potential security flaws before attackers can. Alongside COS, Snyk introduced enhancements to its AI Security Posture Management and unveiled new tools like Evo Agentic Application Security and Snyk Secrets, aimed at securing the entire lifecycle of AI-accelerated software development. These innovations reflect a shift towards integrating autonomous solutions into cybersecurity strategies to address the expanded attack surface AI developments have created.

Evo introduces a novel approach to assessing and managing AI model risk by creating a real risk score that combines the likelihood and impact of adversarial attacks, resulting in a score from 0 to 1000, where lower is better. This methodology shifts from traditional static evaluations to a dynamic, context-aware system that reflects how models are actually deployed and behave under attack in real-world scenarios. By focusing on Attack Success Rate (ASR) and the specific goals of attackers, Evo provides granular insights that enable security teams to understand and prioritize risks, build appropriate guardrails, and enforce policies effectively. The risk intelligence integrates with existing frameworks like OWASP and NIST, facilitating seamless policy enforcement and empowering organizations to govern AI adoption at scale by providing visibility into AI components and their interactions. This approach addresses the challenges of indirect attacks and the complexities of AI deployment, ensuring that risk scores are actionable and aligned with the specific use cases and environments in which AI models operate.

Snyk Secrets, now generally available, is designed to address the challenges of secret sprawl and AI-driven code generation by offering a machine learning-powered detection engine that understands the context surrounding secrets, reducing false positives and enhancing developer trust. This solution is integrated into the Snyk AI Security Platform and operates across various development stages, including IDEs, CLI, and CI/CD pipelines, to prevent sensitive information from reaching repositories. By employing a contextual AI model that surpasses traditional regex-based scanners, Snyk Secrets helps identify and mitigate the risk of exposed credentials more effectively, particularly in the fast-paced AI development environment. The platform also provides unified visibility and governance by connecting secret detection to the broader security posture of an organization, ensuring comprehensive risk management across all codebases.