We are pleased to announce Snyk CLI release, v1.1306.3This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Updates bundled dependencies to remediate known vulnerabilities, keeping the CLI current for teams with supply chain policies on the tools running in their pipelines.Fixed…
Snyk API & Web now supports NTLM v2 authentication for Web targets. Security teams can configure NTLM credentials (username, password, domain, workstation) directly in the target settings, enabling authenticated scans of Windows-authenticated applications without requiring separate tools.
Starting August 4, 2026, Snyk secrets scanner is generally available to help secure your entire SDLC against credential leaks.Stolen credentials remain a leading initial access vector in security breaches, and the rise of AI-generated code increases the risk of exposing sensitive data. You can now use Snyk secrets scanner to detect hardcoded credentials, API keys, and tokens across your repositori…
Until now, a developer could suppress a Snyk Code finding on their own — directly in the Web UI or IDE — with no review step. Suppression happened silently and unilaterally, leaving security teams without a gate on what got ignored.
COBOL support becomes generally available on August 17, 2026. Snyk Code brings SAST to your mainframe applications, scanning fixed-format COBOL across the integrations you already use, so mainframe code receives the same real-time, in-workflow security coverage as the rest of your stack. Detection is tuned with feedback from design-partner environments across large finance and mainframe estates.Wh…
This update is available on August 17, 2026. It broadens language and framework coverage, adds serverless and LangChain support for Python, and cuts false positives in C++ and C#.PythonLangChain support — Snyk Code covers applications that use LangChain, flagging unsafe handling of data flowing through the framework.Serverless support — Snyk Code covers Python applications running on AWS Lambda.Ne…
We are pleased to announce Snyk CLI release, v1.1306.2This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Improved authentication handling in the Snyk Language Server, which powers Snyk's IDE integrationsFixed vulnerabilities:SNYK-GOLANG-GOOGLEGOLANGORGGRPCINTERNALXDSRBAC-1817…
We are introducing Automatic Target Authentication Configuration for API & Web, an AI-driven feature that streamlines DAST authenticated scan setup.
We are pleased to announce Snyk CLI release, v1.1306.1This release contains fixes to ensure security. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Fixed vulnerabilities:CVE-2026-41907CVE-2026-13149CVE-2026-59869CVE-2026-59873CVE-2026-39244Release notes can be found here.If you have any questions, feel free to reach out t…
Extend Snyk Code's security rules with your own code. Add your custom functions to an existing rule so the engine understands your project's specific logic and returns more accurate findings.Start with custom sanitizers: register your in-house sanitizer functions so Snyk Code recognizes them as valid ways to clean data, and stops flagging the code paths your own security controls already protect.W…
We are pleased to announce the latest stable Snyk CLI release, v1.1306.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:DoctorAdds a new snyk doctor command, giving you a quick way to diagnose common CLI problems…
Snyk API & Web now provides native support for Bruno collections. You can import your collections directly into the platform to create API Targets without converting files to Postman collections or OpenAPI schemas first.
We've expanded Snyk Open Source coverage with improved scanning capabilities. These updates help you close security gaps and manage dependencies more effectively. Key improvements include new support for the uv package manager and enhanced Go scanning for private dependencies.uv SCM supportThe uv package manager is an emerging tool in the Python ecosystem. Following our earlier CLI release, uv is…
The July release expands Snyk Code coverage for C++ with several new rules and broader native C++ detection, improves detection for several popular Java libraries, and adds a new Insecure Transmission rule for JavaScript and TypeScript. These changes arrive with the July release on 13 July 2026What's changingNew rulesLog Forging, C++ (CWE-117, high): flags untrusted user input reaching a logging s…
On July 27, 2026, Snyk updates the default setting for issue alert emails to ensure every notification you receive is relevant to your work. These emails alert you to newly detected vulnerabilities and license violations.Summary of changesIf you have never manually configured your notification preferences, you stop receiving these emails after July 27, 2026. This update moves issue alert notificat…
We are pleased to announce Snyk CLI release, v1.1305.2.This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Bumped the Go runtime to version 1.26.4.Improved MCP logging and addressed security issues in the Snyk MCP Server.Fixed vulnerabilities: CVE-2026-44705CVE-2026-45570CVE-2…
This month on Snyk Learn, we’ve added new AI security lessons covering the attacks that target agentic systems: getting agents to run code they shouldn't, poisoning their memory to bend their reasoning, and exploiting the gaps where agents talk to each other!Security lessons[New][AI-Sec] Unexpected code execution (RCE) - tricking your agentic systems to execute code![New][AI-Sec] Memory and Contex…
A cluttered PR backlog slows everyone down. Following a successful Early Access, automatic closing of Open Source Fix PRs is now generally available. What's more, this feature will be turned on by default across all of our customers so your team spends less time triaging stale pull requests and more time shipping.Whether a developer manually applied a fix, removed the dependency, or a transitive u…
The upcoming improvements for our Snyk Code: June Update will be postponed from June 15 to June 22. We're running a final round of quality validation to make sure these updates deliver the most accurate results. These updates, including broader TLS and cryptographic detection for .NET and expanded PHP SQL injection coverage, will now go live on June 22.
We are thrilled to announce that the Prevention Report is now available in Early Access!Measuring the true impact of "shifting left" has traditionally been a challenge. We designed the Prevention report to give you clear, actionable visibility into the effectiveness of security adoption directly within your development lifecycle.This new report tracks the vulnerabilities developers proactively rem…
We are pleased to announce Snyk CLI release, v1.1305.1This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.This update includes the following:Improved rate-limit handling: the CLI now respects the X-RateLimit-Reset header when it is rate limited by the API, so retries wait the correct amount of time. This improv…
We are excited to announce a redesign of the Snyk User Docs site, introducing a new structure built around site sections.What's changed?The docs are now reorganized into six clearly defined site sections:Discover Snyk: An introduction to the platform, capabilities, and supported languages.Platform administration: Settings, user management, Org configuration, and more.Scan, fix, and prevent: Snyk c…
We're expanding Snyk Code analysis for the .NET (C# and VB) ecosystem with broader detection across TLS configuration, cryptographic algorithms, and third-party crypto libraries. We built these improvements to surface a wider range of crypto-related security issues in .NET codebases while keeping false positives in check. Coverage extends across the standard library and the most common third-party…
New Model & New ArchitectureWe're happy to announce we're upgrading Agent Fix to use the Claude family of models enhanced by Snyk's tooling and intelligence. This move delivers the following major improvements: Security & Functional EnhancementsAgentic Retries: Our new workflow now detects where code suggestions deviate from security best practices. Instead of discarding the result, the system ana…
Snyk API & Web now supports the OWASP Top 10:2025 standard for compliance reporting. Users can generate compliance reports against either OWASP 2025 or OWASP 2021 — both versions remain available.
We are pleased to announce the latest stable Snyk CLI release, v1.1305.0.We are introducing the following key improvements in this version. To learn more about bug fixes and additional enhancements beyond what is highlighted below, please reference the full release notes.This update includes the following:SBOMIntroduces the --allow-incomplete-sbom flag for snyk sbom, allowing the SBOM to be genera…
We've improved the recently introduced Download CSV feature to offer greater flexibility when exporting data directly from the Snyk API & Web interface.
This month on Snyk Learn, there are brand new lessons for Evo by Snyk, along with a refreshed "Snyk in an IDE" lesson set. We are also excited to launch the new AI Secure Development learning path, where you will learn to build any app securely using AI while mastering foundational AI-powered security topics such as prompt injection and MCP.Try the new "Feedback" button on learn.snyk.io (login req…
Introducing Hooks-Based GuardrailsSnyk Studio is evolving our agentic guardrails to enable deeper trust in agent-generated code. We are debuting a new asynchronous, hooks-based approach to replace traditional rules-based guardrails, ensuring that security remains deterministic and efficient without slowing down the developer loop.As agentic development has matured, initial friction points in rules…
We've added several new widgets to the analytics overview to provide better visibility into your security program. These updates include key performance indicators (KPIs) from the Snyk Studio and pull request (PR) check reports directly into your main dashboard.