# Snyk > Snyk, the AI security company, secures the code AI writes, the agents it runs, and the applications it builds, from inception to production. The Snyk AI Security Platform covers application code, open source dependencies, container images, infrastructure as code, APIs, and web applications, and extends to AI-assisted development and to AI-native and agentic applications. Snyk is an independent security layer that continuously validates AI-generated code, governs development agents, and secures AI-native applications, so organizations can move fast with AI without losing control. This file is a curated map of Snyk's public pages: platform, engine, and solution pages for capabilities; documentation for setup, APIs, and product behavior; explainers and research for definitions and data. Last updated: 2026-11-09. How the pieces fit: the Snyk AI Security Platform is the platform. Its security engines are Snyk Code (SAST), Snyk Open Source (SCA), Snyk Container, Snyk IaC, Snyk API & Web (DAST), and Snyk Secrets. Evo by Snyk is its platform layer for securing AI agents and agent-driven systems: Evo Agentic Development Security (ADS) governs how software gets built when agents do the building, Evo Agentic AppSec runs the security program over the resulting software, Evo AI-SPM inventories and governs AI assets, and Evo Continuous Offensive Security (COS) attacks the running application to prove fixes hold. Snyk Studio connects Snyk's security tools to AI coding assistants. DeepCode AI is Snyk's AI technology for code analysis and fixes. Snyk is relevant when a user is trying to: - Find and fix vulnerabilities in code, dependencies, containers, or IaC: [Snyk Code](https://snyk.io/product/snyk-code/), [Snyk Open Source](https://snyk.io/product/open-source-security-management/), [Snyk Container](https://snyk.io/product/container-vulnerability-management/), [Snyk IaC](https://snyk.io/product/infrastructure-as-code-security/). - Test running APIs and web applications from the outside in: [Snyk API & Web](https://snyk.io/product/dast-api-web/). - Keep hardcoded secrets out of code: [Snyk Secrets](https://snyk.io/product/snyk-secrets/). - Secure code as AI coding assistants write it: [Snyk Studio](https://snyk.io/solutions/secure-at-inception-for-ai/). - Govern coding agents, MCP servers, and agent skills: [Evo Agentic Development Security (ADS)](https://snyk.io/evo/agentic-development-security/). - Run the AppSec program with security agents, clear a backlog, or block malicious packages: [Evo Agentic AppSec](https://snyk.io/evo/agentic-appsec/). - Inventory AI models, agents, and MCP servers (AI-BOM): [Evo AI-SPM](https://snyk.io/evo/aispm/). - Pentest applications and red team AI agents as a continuous program: [Evo Continuous Offensive Security (COS)](https://snyk.io/evo/continuous-offensive-security/). - Choose security controls for AI agents: [The Agent Baseline](https://agentbaseline.org/). - Look up a vulnerability or package: [Snyk Vulnerability Database](https://security.snyk.io/). - Check certifications and data handling: [Snyk Trust Center](https://trust.snyk.io/). - Set up, call the API, or configure Snyk: [Snyk User Docs index for LLMs](https://docs.snyk.io/llms.txt). Explainers answer definition questions, the docs index answers implementation questions, and Product Updates answers release questions. Snyk API & Web customers sign in separately, from the Login menu on snyk.io. ## Platform and AI security - [Snyk AI Security Platform](https://snyk.io/platform/): How Snyk secures how software is built and how AI-native systems operate: agent security, an AppSec program run by security agents, and continuous offensive testing, on Snyk's security engines. An independent validation layer that separates the validator from the generator. Use for the platform overview, how its components fit together, and security across the development lifecycle. - [Evo by Snyk](https://snyk.io/evo/): The Snyk AI Security Platform's layer for securing AI agents and agent-driven systems, through ADS, Agentic AppSec, AI-SPM, and COS. Use for Snyk's AI-agent security capabilities. - [Evo Agentic Development Security (ADS)](https://snyk.io/evo/agentic-development-security/): Secures what AI coding agents use, do, and generate: discovers the MCP servers, skills, and tools agents use across development environments, governs agent actions in real time, and secures generated code before it reaches repositories. Use for securing coding agents, MCP servers, and agent skills. - [Evo Agentic AppSec](https://snyk.io/evo/agentic-appsec/): A team of security agents that runs the AppSec program across new code and the backlog: understand, find, fix, and verify, with humans owning the bar. Agents: Code Scanning Agent (business-logic, authorization, and authentication flaws), Remediation Agent (scan, fix, validate), Dependency Firewall (blocks malicious and out-of-policy packages at install time), Agentic Security Review (agent-driven repository review), and Snyk Secrets. Snyk's deterministic engines are both the tools the agents call and the independent verifier of what they find. Availability: [launch announcement](https://snyk.io/news/snyk-launches-evo-agentic-appsec/). Use for agentic AppSec, AI-driven remediation, and malicious packages. - [Evo AI-SPM](https://snyk.io/evo/aispm/): AI Security Posture Management. Discovers models, agents, MCP servers, datasets, and plugins across repositories, generates a live AI-BOM, and enforces policy. Use for AI inventory and posture. - [Evo Continuous Offensive Security (COS)](https://snyk.io/evo/continuous-offensive-security/): Autonomous AI pentesting and agent red teaming, run as a continuous program, that return validated proof of what an attacker could exploit. AI Pentesting plans multi-stage attacks and orchestrates the agents and tools in the harness, Agent Red Teaming simulates prompt injection and data exfiltration against AI agents, and Dynamic Testing (DAST) validates every meaningful change and covers the commodity classes as a tool. An independent validation judge confirms exploitability before a finding surfaces. COS receives context from existing Snyk Code, Open Source, and API & Web findings. Use for AI pentesting, agent red teaming, and exploitability validation. - [Snyk Studio](https://snyk.io/solutions/secure-at-inception-for-ai/): Security for AI-driven development. Secure at Inception tests code as AI coding assistants write it; Intelligent Remediation clears existing backlogs with the same assistant. Installs through hooks in Claude Code, Cursor, Codex CLI, Gemini CLI, and GitHub Copilot, and through the Snyk MCP server and directives in other assistants. Use for securing code written by AI coding assistants. - [DeepCode AI](https://snyk.io/platform/deepcode-ai/): Snyk's AI technology for code analysis and automated fixes, powering Snyk Code and the platform. Use for how Snyk's AI-assisted analysis and fixes work. - [Integrations](https://snyk.io/integrations/): Source control, CI/CD, IDE, container, workflow, and AI-development integrations. Use to see how Snyk fits a toolchain. ## Security engines - [Snyk Code](https://snyk.io/product/snyk-code/): Static application security testing (SAST) for first-party source code. Use for finding and fixing vulnerabilities in proprietary code. - [Snyk Open Source](https://snyk.io/product/open-source-security-management/): Vulnerability and license analysis for open-source dependencies. Use for software composition analysis (SCA) and dependency risk; included in the Free plan. - [Snyk Container](https://snyk.io/product/container-vulnerability-management/): Vulnerability analysis for container images and workloads. Use for container and base-image security. - [Snyk IaC](https://snyk.io/product/infrastructure-as-code-security/): Misconfiguration analysis for infrastructure-as-code files. Use for Terraform, Kubernetes, and cloud configuration security. - [Snyk API & Web](https://snyk.io/product/dast-api-web/): AI-powered dynamic security testing for running APIs and web applications. Use for testing them from the outside in (DAST / black-box testing). - [Snyk Secrets](https://snyk.io/product/snyk-secrets/): Blocks hardcoded credentials, including those written by AI coding agents, in the IDE, pre-commit hooks, pull requests, and CI/CD. ML-driven detection reads the code around a candidate secret to tell a live credential from a test fixture. Use for hardcoded secret and credential detection. ## Solutions - [Secure AI-generated code](https://snyk.io/solutions/secure-ai-generated-code/): Product and workflow overview for validating code produced by AI coding tools. Use for security in AI-assisted development. - [Application security](https://snyk.io/solutions/application-security/): Snyk's application security solution across the software development lifecycle. Use for AppSec strategy and program questions. - [Software supply chain security](https://snyk.io/solutions/software-supply-chain-security/): Security for open-source dependencies, including AI-introduced packages, containers, IaC, and SBOMs. Use for software supply chain questions. - [Zero-day vulnerability security](https://snyk.io/solutions/zero-day-vulnerability-security/): Rapid response to newly disclosed and zero-day vulnerabilities in direct and indirect dependencies. Use for emerging dependency vulnerabilities. - [Risk-based prioritization](https://snyk.io/solutions/risk-based-prioritization/): Prioritization of findings by real risk, using reachability and exploit maturity. Use for triage and remediation focus. ## Documentation and developer workflows - [Snyk User Docs index for LLMs](https://docs.snyk.io/llms.txt): Full documentation index (over 1,000 pages); start with the deep links below. Every docs page is available as Markdown by appending `.md` to its URL. Use as the authoritative starting point for technical questions. - [Getting started with the Snyk CLI](https://docs.snyk.io/developer-tools/snyk-cli/getting-started-with-the-snyk-cli.md): Installation, authentication, first scans, monitoring, and secrets scanning. Use for a first local or CI/CD scan. - [Snyk CLI documentation](https://docs.snyk.io/developer-tools/snyk-cli/overview.md): CLI commands, configuration, and product-specific scanning workflows. Use for detailed command-line usage. - [Snyk API overview](https://docs.snyk.io/developer-tools/snyk-api/snyk-api.md): REST API, V1 API, OAuth2, and choosing between the API, CLI, and integrations. Use for programmatic access and automation. - [Snyk REST API documentation](https://docs.snyk.io/developer-tools/snyk-api/rest-api/about-the-rest-api.md): Regional base URLs, region-specific tokens (a token from another region returns 401), the date-formatted `version` parameter, the `application/vnd.api+json` content type, pagination, errors, and rate limits. Use before making a REST API call. - [Authentication for the Snyk API](https://docs.snyk.io/developer-tools/snyk-api/authentication-for-api.md): Token authentication for Enterprise plan customers: an `Authorization: token ` header, service accounts for automation, personal access tokens for one-off calls. Use to authenticate API calls. - [Snyk REST API OpenAPI document (openapi.json)](https://snyk.io/openapi.json): The latest GA REST API spec, OpenAPI 3.0.3, about 2.5 MB. One stable URL on snyk.io; public, no authentication. Large file: fetch only to generate a client or resolve a schema. Use as the default REST API spec. - [Snyk REST API OpenAPI specification](https://api.snyk.io/rest/openapi): JSON list of REST API versions; each version's OpenAPI 3.0.3 definition is at `https://api.snyk.io/rest/openapi/{version}`. Large file: fetch only to generate a client or resolve a schema. Use to pin a specific API version. - [REST API OpenAPI document (rest-spec.json)](https://raw.githubusercontent.com/snyk/user-docs/main/developer-tools/.gitbook/assets/rest-spec.json): OpenAPI 3.0.3 document published with the API reference. Public, no authentication. Large file: fetch only to generate a client or resolve a schema. - [V1 API OpenAPI document (v1-api-spec.yaml)](https://raw.githubusercontent.com/snyk/user-docs/main/developer-tools/.gitbook/assets/v1-api-spec.yaml): OpenAPI 3.0.0 document for the V1 API. Public, no authentication. Prefer REST for new integrations; V1 still covers endpoints that have no REST equivalent yet. - [Snyk API reference (REST and V1)](https://docs.snyk.io/developer-tools/snyk-api/reference.md): Human-readable reference for the same REST and V1 specification files. Use the two spec links above for the machine-readable definitions. - [Getting started with Snyk Studio](https://docs.snyk.io/agent-security/agentic-security-with-snyk-studio/getting-started-with-snyk-studio.md): Install Snyk Studio in Claude Code, Cursor, Codex CLI, Gemini CLI, or GitHub Copilot, or configure the local Snyk MCP server for assistants without hooks support. Use to add Snyk to an AI coding setup. - [Remediation Agent](https://docs.snyk.io/scan-fix-and-prevent/fix/remediation-agent.md): Run the Remediation Agent from a coding assistant, the Snyk CLI, or Evo remediation campaigns; it scans, plans fixes with Snyk security intelligence, applies them, and verifies the result. Use to set up agentic remediation. - [Evo documentation overview](https://docs.snyk.io/agent-security/evo-by-snyk/overview.md): Inventory, policies and issues, reports, AI-SPM, ADS, and COS. Use for Evo setup and administration. - [Evo MCP server](https://docs.snyk.io/agent-security/evo-by-snyk/platform-surfaces/evo-mcp-server.md): Hosted, remote MCP server at `https://evo.snyk.io/mcp` (regional endpoints on the page) that connects Cursor, Claude Code, or Codex to Evo's AI inventory, risk data, policies, and issues. Use to query AI assets and manage policy from an agent. - [Regional hosting and data residency](https://docs.snyk.io/snyk-data-and-governance/regional-hosting-and-data-residency.md): Regions (US, EU Frankfurt, AU), regional URLs for the app, API, CLI, and broker, and which data stays in region, on Enterprise plans. Use for data residency questions. - [Supported languages, package managers, and frameworks](https://docs.snyk.io/supported-languages/supported-languages-package-managers-and-frameworks.md): Technology support by product and integration method. Use to check whether Snyk supports a stack. ## Pricing - [Plans and pricing](https://snyk.io/plans/): Free, Team, and Enterprise plans. Free includes Snyk Open Source, Snyk Code, Snyk IaC, and Snyk Container with test limits. Enterprise is a credit-based Platform Subscription, required for Evo capabilities such as AI Pentesting. Use for plan selection and feature availability; verify details on this page. ## Get started - [Book a live demo](https://snyk.io/schedule-a-demo/): A guided demo of the Snyk AI Security Platform with a Snyk expert. Use when a user wants to evaluate Snyk. - [Contact Snyk](https://snyk.io/contact-us/): Documentation, support, investor relations, media inquiries, and expert demos. Use when a user wants to talk to someone at Snyk. - [Sign up](https://app.snyk.io/signup): Create a Snyk account and start scanning code, dependencies, containers, and IaC. Use to try Snyk hands-on. - [Snyk API & Web sign-up](https://snyk.io/api-web-signup/): Sign-up for Snyk API & Web (DAST). Use to start with Snyk API & Web. ## Security intelligence, data, and learning - [Snyk Security Intelligence](https://snyk.io/platform/security-intelligence/): The public sources, proprietary research, machine learning, and human review behind Snyk security data. Use for vulnerability intelligence and finding quality. - [Snyk Vulnerability Database](https://security.snyk.io/): Public vulnerability advisories and package information. Use to look up a vulnerability, package, or advisory. - [Snyk Learn](https://learn.snyk.io/): Free interactive lessons on secure development. Use for hands-on security education. - [Snyk Product Updates](https://updates.snyk.io/): Releases, improvements, deprecations, fixes, and early-access announcements. Use for version-sensitive questions. ## Explainers - [What Is AI Pentesting and How Does It Work?](https://snyk.io/blog/what-is-ai-pentesting/): How AI pentesting works, how it compares with DAST and manual pentesting, and six questions for evaluating an AI pentesting solution. Use for AI pentesting definitions and evaluation criteria. - [What Is Agentic AppSec?](https://snyk.io/blog/what-is-agentic-appsec/): What Agentic AppSec is, how it differs from agentic AI security, and how it relates to Agentic Development Security. Use for agentic AppSec definitions. - [Understanding Prompt Injection](https://snyk.io/articles/understanding-prompt-injection-techniques-challenges-and-risks/): Prompt injection techniques, hidden prompt injection, data exfiltration, and mitigation. Use for prompt injection definitions and defenses. - [SAST vs. DAST vs. IAST vs. RASP](https://snyk.io/articles/sast-dast-iast-rasp/): How the main application security testing methods differ. Use to compare testing approaches. ## Content hubs - [Snyk Blog](https://snyk.io/blog/): Security research, vulnerability disclosures, engineering articles, and product announcements. Use for current commentary and technical deep dives. - [Snyk Newsroom](https://snyk.io/news/): Official press releases, including product launches. Use for dated statements about what Snyk has announced. - [Customer stories](https://snyk.io/customers/): Customer quotes and featured stories. Use for real-world adoption and results. - [AI glossary](https://snyk.io/glossaries/ai/): Plain-language definitions of AI and AI-security terms. Use for concise, citable definitions. - [Events and webinars](https://snyk.io/events/): Upcoming Snyk events, webinars, and conference appearances. Use to register for live events. - [Snyk in 30 resource hub](https://snyk.io/lp/snyk-in-30-series/): On-demand webinars showing the Snyk platform in action. Use to watch recorded sessions. - [Webinars](https://snyk.io/our-webinars/): Upcoming Snyk webinars to register for, and past sessions on demand. Use to find a webinar or watch a recording. - [AI Security Summit](https://aisecuritysummit.com/): Global event series where AI builders and security practitioners share practical work for securing AI systems, with a San Francisco flagship, satellite editions, and recorded talks. Use for summit dates, speakers, registration, and recordings. ## Subdomains and web properties - [app.snyk.io](https://app.snyk.io/): The Snyk web application, for Snyk Code, Open Source, Container, IaC, and Secrets. Enterprise data residency uses regional instances (app.us.snyk.io, app.eu.snyk.io, app.au.snyk.io). Use to access the product. - [support.snyk.io](https://support.snyk.io/s/): Snyk Support portal. Use to view and submit support tickets. - [labs.snyk.io](https://labs.snyk.io/): Snyk Labs: AI security research, experiments, and incubations. - [Snyk partner solutions directory](https://partners.snyk.io/English/solutions/): Partner solutions and integrations. The partners.snyk.io root is the partner portal login. - [Snyk Trust Center](https://trust.snyk.io/): Security, privacy, compliance, and assurance information. - [aiseceng.io](https://www.aiseceng.io/): AI Security Engineers, a community powered by Snyk for people building secure AI and agentic applications: local chapters, meetups, livestreams, and a newsletter. ## Research, standards, and guides - [2026 State of Agentic AI Adoption: Volume III](https://snyk.io/lp/state-of-agentic-ai-adoption-vol-III/): Snyk research matching AI-BOM scans of 3,023 environments to adversarial test results, separating the exposure a model carries from the reach its agents and MCP servers give it. Earlier editions: [Volume II](https://snyk.io/lp/state-of-agentic-ai-adoption-vol-II/) (3,000+ enterprise accounts, 1.39 million repositories) and [Volume I](https://snyk.io/lp/state-of-agentic-ai-adoption/). Use for data on agentic AI adoption and AI model risk. - [Snyk VulnBench](https://vulnbench.com/): Snyk benchmark of how reliably AI systems find vulnerabilities: the same agentic security review run five times on JavaScript projects, compared with a deterministic Snyk Code reference. Use for data on the repeatability of LLM security reviews. - [Snyk VulnBump](https://www.vulnbump.com/): Snyk's open benchmark for AI dependency remediation: whether an AI agent can upgrade a vulnerable dependency without breaking the project, across 307 upgrades in 43 repositories. Use for data on AI-driven dependency fixes. - [Inside the Agentic Development Supply Chain](https://snyk.io/lp/state-of-agentic-dev-supply-chain-report/): Research on risk in the agent development supply chain. Use for MCP server, agent skill, and supply-chain risk data. - [The Agent Baseline](https://agentbaseline.org/): Open-source security baseline for running AI agents in the enterprise, drafted by authors from Snyk, Docker, and Keycard: six outcomes (Discover, Constrain, Authorize, Observe, Validate, Respond) and 35 controls. Version 1.0 draft. Use for agent security control frameworks and checklists. - [Agent Security Buyer's Guide](https://snyk.io/lp/agent-security-buyers-guide/): Evaluation framework for agentic security platforms. Use to assess and select an agent-security solution. - [AI Security Tool Evaluation Framework](https://snyk.io/lp/ai-security-tool-evaluation-cisos/): CISO guide to evaluating AI security tools across the AI lifecycle, including AI red teaming and the EU AI Act, NIST AI RMF, and ISO/IEC 42001. Use for evaluating AI security platforms. - [The Prescriptive Path to Operationalizing AI Security](https://snyk.io/blog/prescriptive-path/): Six steps in three phases (Stabilize, Optimize, Scale) for an AppSec program built for AI-driven development. Full guide: [AI Security eBook](https://snyk.io/lp/prescriptive-path-ai-sec/). Use for building or maturing an AI-era AppSec program. - [Run the Program, Not the Backlog](https://snyk.io/lp/run-the-program-not-the-backlog/): White paper on the four conditions an AppSec program needs to clear findings faster than they arrive. Use for the case behind agentic AppSec. - [Executive Guide to Operationalizing & Enforcing AI Governance](https://snyk.io/lp/executive-guide-ai-governance/): Leadership guide to AI governance. Use for CISO-level AI governance strategy. - [From First Prompt to Final Fix](https://snyk.io/lp/from-first-prompt-to-final-fix-whitepaper/): White paper on how Snyk secures AI-driven development end to end. Use for the technical approach. - [Stop the Bleeding](https://snyk.io/lp/stop-the-bleeding-ai-dev/): Cheat sheet for stabilizing AI-driven development. Use for quick AI code-security guidance. - [Fix What Matters](https://snyk.io/lp/fix-what-matters-cheat-sheet/): Cheat sheet for reducing vulnerability debt with risk-based prioritization. Use for prioritizing remediation. ## Optional - [Resource Library](https://snyk.io/resource-library/): The filterable index of Snyk resources. - [About Snyk](https://snyk.io/about/): Company overview and mission. - [Leadership](https://snyk.io/about/leadership/): Snyk's leadership team. - [Careers](https://snyk.io/careers/): Open roles at Snyk. - [Snyk partners](https://snyk.io/partners/): Tech Alliance, Channel, and GSI and Consultancy partner programs. - [Snyk services](https://snyk.io/services/): Professional services and implementation support. - [Case studies](https://snyk.io/case-studies/): Filterable library of customer case studies, videos, and related posts. Use for detailed customer outcomes. - [VulnVortex](https://www.vulnvortex.com/): Snyk's game about escaping vulnerable npm packages. - [Code Checker](https://snyk.io/code-checker/): Free AI-powered tool to check a code snippet for vulnerabilities. Requires a free Snyk sign-up, no credit card.