Articles

Let AI Detect and Patch Your Vulnerable Code: Claude Desktop and Snyk MCP Server

Integrate Claude Desktop with Snyk's official MCP Server to enhance security in your development workflow. Learn how to set up, configure, and use Snyk's security scanning tools to detect and patch vulnerabilities, streamlining DevSecOps and securing your code.

Catch Vulnerabilities Early: Your Snyk MCP Cheat Sheet

Integrate security into AI workflows with the Snyk MCP Server cheat sheet. Learn installation, configuration, transport types, core security scanning functions (Code, SCA, IaC), and rules for agentic AI tools.

AI in Ethical Hacking: Revolutionizing Cybersecurity Testing

AI in ethical hacking revolutionizes cybersecurity testing. Discover how AI transforms vulnerability assessment, penetration testing, and threat intelligence with cutting-edge tools and methodologies.

Patching Detected Vulnerabilities with Factory AI and Snyk Studio

Factory AI Droids and Snyk MCP streamline vulnerability patching. Learn how specialized AI agents integrate for automated security fixes and DevSecOps.

Defending Against Glassworm: The Invisible Malware That's Rewriting Supply Chain Security

Defend against Glassworm, the invisible malware rewriting supply chain security. Learn how anti-trojan-source detects and prevents these Unicode attacks, protecting your VS Code extensions and credentials.

Detecting & Patching Vulnerabilities with Continue and Snyk MCP

Integrate security directly into your AI coding workflow. Learn how to use the open-source Continue AI coding assistant with Snyk Studio's Model Context Protocol (MCP) to automatically detect, fix, and verify high-severity vulnerabilities like SQL Injection, all without leaving your IDE.

AI Threat Hunting: Transforming Cybersecurity Through Intelligent Automation

Discover how AI-driven threat hunting transforms cybersecurity by detecting hidden threats, automating analysis, and strengthening defense strategies against evolving cyberattacks.

Evals for LLMs: Understanding Evaluation Systems for AI Models

Learn how Eval frameworks act like pen-tests for LLMs—helping cybersecurity teams assess resilience to adversarial attacks, ensure accuracy, manage risks, and integrate security into the AI lifecycle.

The Highs and Lows of Vibe Coding

"Vibe coding" with AI builds billion-dollar startups fast, but it also creates massive security risks. With 40% of AI code vulnerable and major data leaks emerging, explore the highs and lows of this trend and the path to securing it.

From Models to Compound AI Systems: Building the Future of AI

AI systems combine multiple AI models and tools to tackle complex tasks, for enhanced performance, versatility, & reliability.

Context Engineering: Building Intelligent AI Systems Through Strategic Information Management

Discover how context engineering shapes AI behavior, enhances user experience, and drives intelligent automation.

AWS security: Complete guide to Amazon cloud security

What is AWS security? How secure is AWS? Explore Snyk’s top tips to help you secure your AWS deployments, and maintain visibility of your AWS resources in development and production.

Docker Security - Challenges & Best Practice

Docker security is the practice of protecting containers, applications, host systems, and anything else related to Docker. Learn more with our full guide.

Code security auditing 101

A code security audit is a process of analyzing source code with the goal of finding security vulnerabilities, licensing, and other programming issues. §

What is technical due diligence (TDD)?

Technical due diligence is an in-depth analysis of the state of a company from a technical perspective, including its products, infrastructure, and more.

Black box testing basics

Black box testing is a software testing method that does not require knowledge about how an application is built, in order to simulate an attacker.

Container registry security: security concerns for using a container registry

Learn about container registry security, and the factors you should consider during setup and usage for public and private container registries.

Web Application Security Explained: Risks & Nine Best Practices

It’s vital for Developers to have knowledge of web application security so they can secure web apps as they’re developed, reducing the burden on security teams.

Three Steps to Container Image Security

Follow our practical guide to container security, developed in partnership with Docker. 3 Essential steps to run your containers securely.

The Basics of Getting Started with Shift Left Testing

Learn about shift left testing, an integrated approach to addressing security and testing as early as possible in the SDLC to find and fix vulnerabilities.