The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page. The installer registers a scheduled job on the machine, so Agent Supply Chain Security scans run on their own schedule without needing MDM.What The ADS installer now ships as a signed macOS .pkg and Windows .msi, downloaded from the Settings page in Evo. Why Deployment no longer means wrapping a…
We are pleased to announce Snyk CLI release, v1.1307.4This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:New experimental snyk studio command that sets up Snyk Studio in supported AI coding tools (Cursor, Claude Code, Codex, Copilot, Gemini, Kiro, and Windsurf), so the code t…
Snyk Code priority scores dropped by up to 200 points on August 17, 2026, for findings whose rule had a fix example.What changedA finding used to earn 200 of the 1,000 available priority score points when Snyk held a fix example for its rule. The August 17, 2026 release retired fix examples, and the scoring factor went with them.WhyFix-example availability describes Snyk's content coverage. It say…
Atlassian ends support for Atlassian Connect in December 2026. Snyk for Jira has been rebuilt on Forge, Atlassian's current cloud app platform, with all of the same functionality.No action is required. New installations use the Forge version from September 30, 2026, and existing installations will be migrated during October. Permissions, configuration, ticket creation, and existing Jira issues all…
You can connect any MCP client, such as Claude, Codex or Cursor, to Evo and ask about your AI estate from the agent you already work in. What's new. You can now:Ask what AI assets Evo has discovered across your code, your developer machines, and your pentest targetsSee how those assets connect, for example which MCP servers an agent uses or which findings came from a targetRead your policies and t…
We are pleased to announce Snyk CLI release, v1.1307.3This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:snyk test now reports an unreadable .snyk policy file as SNYK-POLICY-0002 with a message identifying the problem, instead of an unspecified error.snyk test --all-projects…
Snyk Container will begin reporting vulnerabilities from the Go standard library for all customers. Scans of container images built from Go binaries identify the standard library version the binary was compiled with and report known vulnerabilities against it.Affected images gain a new stdlib dependency in the dependency graph, versioned to the Go release used for the build, for example stdlib@1.2…
Snyk API & Web now lets you upload your organization's internal Certificate Authority (CA), so the certificates it issues are trusted the same way as publicly issued certificates.What's newMany enterprises operate their own internal CA to issue certificates for both internal tools and internet-facing applications. Although these certificates aren't signed by a public CA, they should still be inclu…
We are pleased to announce Snyk CLI release, v1.1307.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Removed an unused experimental feature.Fixed vulnerabilities: CVE-2026-84445If you have any questions, feel free to reach out to the Snyk support team. We encourage everyo…
We are pleased to announce Snyk CLI release, v1.1307.1This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:snyk test again reports SNYK-CLI-0008 and exits with code 3 when a repository contains no supported manifest files, instead of a generic SNYK-CLI-0000 with exit code 2. sn…
The "What"Repo Content Sync keeps your Snyk Projects aligned with what your repositories actually contain. When a change is merged to a branch Snyk monitors, Snyk creates and begins monitoring Projects for newly added manifest, Dockerfile, and configuration files, and deactivates the Projects whose files were removed. A file that is moved or renamed is picked up at its new path, and the Project at…
We are pleased to announce the latest stable Snyk CLI release, v1.1307.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:Secretssnyk secrets test now supports exclusions — add files or paths to the exclude section…
Starting August 18, 2026, a user's Evo data is limited to the Snyk Organizations they can read.Until now, everyone with access to Evo saw every repository, asset, and issue in the Tenant. Evo now reuses your existing Snyk Organization hierarchy, so there is nothing new to model and no migration to run. Nobody loses access until an administrator changes their role.What's new:Tenant Viewer now grant…
This update is available on September 14, 2026. It improves coverage and precision across Snyk Code: template files are analyzed, Java framework and library support is extended, detection gaps are closed in six languages, and .gitignore no longer hides committed files from analysis.Template filesSnyk Code analyzes template files and follows data from your application code into the template. Cross-…
Starting August 17, 2026, Evo by Snyk uses a rebuilt model risk score to evaluate the AI models discovered in your organization.The previous Risk Index is replaced by a single score from 0–1,000 that combines attack success rate with the potential impact of a successful attack, tested against categories including prompt injection, data exfiltration, and insecure code generation. The result is a sc…
The "What"Snyk is introducing Snyk Assist — an AI-powered support and guidance assistant available directly inside the Snyk UI.Snyk Assist answers product, setup, and troubleshooting questions in plain language, grounded in Snyk's own documentation, release notes, and support knowledge articles. It can also retrieve read-only information about your current organization and group, and open a suppor…
Snyk is rolling out a redesigned navigation experience! The classic sidebar — which listed every page across Tenant, Group, and Organization scopes at once — is replaced by a single breadcrumb bar at the top that lets users switch scope in one click via per-level drop-downs. The left sidebar is condensed to core areas only (Analytics, Inventory, Projects, Issues, Policies, Settings), with all sett…
We are pleased to announce Snyk CLI release, v1.1306.4This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Clearer error messages when the CLI cannot reach a configured proxy. Failures now report the proxy URL the CLI attempted to use, with credentials redacted, along with the…
We are pleased to announce Snyk CLI release, v1.1306.3This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Updates bundled dependencies to remediate known vulnerabilities, keeping the CLI current for teams with supply chain policies on the tools running in their pipelines.Fixed…
Snyk API & Web now supports NTLM v2 authentication for Web targets. Security teams can configure NTLM credentials (username, password, domain, workstation) directly in the target settings, enabling authenticated scans of Windows-authenticated applications without requiring separate tools.
Starting August 4, 2026, Snyk secrets scanner is generally available to help secure your entire SDLC against credential leaks.Stolen credentials remain a leading initial access vector in security breaches, and the rise of AI-generated code increases the risk of exposing sensitive data. You can now use Snyk secrets scanner to detect hardcoded credentials, API keys, and tokens across your repositori…
Until now, a developer could suppress a Snyk Code finding on their own — directly in the Web UI or IDE — with no review step. Suppression happened silently and unilaterally, leaving security teams without a gate on what got ignored.
COBOL support becomes generally available on August 17, 2026. Snyk Code brings SAST to your mainframe applications, scanning fixed-format COBOL across the integrations you already use, so mainframe code receives the same real-time, in-workflow security coverage as the rest of your stack. Detection is tuned with feedback from design-partner environments across large finance and mainframe estates.Wh…
This update is available on August 17, 2026. It broadens language and framework coverage, adds serverless and LangChain support for Python, and cuts false positives in C++ and C#.PythonLangChain support — Snyk Code covers applications that use LangChain, flagging unsafe handling of data flowing through the framework.Serverless support — Snyk Code covers Python applications running on AWS Lambda.Ne…
We are pleased to announce Snyk CLI release, v1.1306.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Improved authentication handling in the Snyk Language Server, which powers Snyk's IDE integrationsFixed vulnerabilities:SNYK-GOLANG-GOOGLEGOLANGORGGRPCINTERNALXDSRBAC-1817…
We are introducing Automatic Target Authentication Configuration for API & Web, an AI-driven feature that streamlines DAST authenticated scan setup.
We are pleased to announce Snyk CLI release, v1.1306.1This release contains fixes to ensure security. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Fixed vulnerabilities:CVE-2026-41907CVE-2026-13149CVE-2026-59869CVE-2026-59873CVE-2026-39244Release notes can be found here.If you have any questions, feel free to reach out t…
Extend Snyk Code's security rules with your own code. Add your custom functions to an existing rule so the engine understands your project's specific logic and returns more accurate findings.Start with custom sanitizers: register your in-house sanitizer functions so Snyk Code recognizes them as valid ways to clean data, and stops flagging the code paths your own security controls already protect.W…
We are pleased to announce the latest stable Snyk CLI release, v1.1306.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:DoctorAdds a new snyk doctor command, giving you a quick way to diagnose common CLI problems…
Snyk API & Web now provides native support for Bruno collections. You can import your collections directly into the platform to create API Targets without converting files to Postman collections or OpenAPI schemas first.