What's new?
Recent updates to Snyk products and documentation, including new features, changes, and knowledge base improvements
The most recent updates include significant changes to the user docs, such as features added or removed, structural changes that affect how you find relevant information, and other improvements to enhance your interaction with the Snyk knowledge base.
September 2026
Evo by Snyk
Evo MCP Server is now generally available. Evo by Snyk documents a hosted remote MCP server with regional endpoints, setup for Cursor, Claude Code, and Codex, and eight read tools and three write tools for querying and managing assets, issues, and policies. See Evo MCP Server.
Agent Behavior Governance and Agent Supply Chain Security now list GitHub Copilot as a supported agent. See Agent Behavior Governance and Agent Supply Chain Security.
Activation documentation now covers the Save & Publish step before you install the agent, and the
--scan,--guard, and--studiouninstall flags for removing individual products. See Activation and deployment.
Snyk API
The Export API documents new filters for the
prevention_eventsdataset, includingevent_type,effective_severity,sdlc_stage,git_repo, andgit_branch. See Export API: Specifications, columns, and filters.The Model API reference page is now in the Snyk API table of contents. See Model.
Snyk API & Web
Scanning Agents now report a status of Connected over UDP, Connected over TCP, or Disconnected, and a new Scanning Agent details page shows availability, outages, and the targets that use the agent. See Scan internal applications.
A new page explains how to upload a custom CA certificate in PEM format under Scan Settings, so Snyk API & Web can scan targets that use a private PKI. See Add a custom CA certificate.
Snyk API & Web documents the hostnames, IP addresses, and ports used for optional out-of-band vulnerability checks, and removes the deprecated IP addresses. See Scanner IP address.
Snyk Code
Snyk Code documentation now states that the
.snykfile excludes files from scans but cannot ignore a finding. To ignore a finding, use the Snyk Web UI orsnyk ignore create. See Ignore issues.Snyk Code now supports Java analysis for Java versions up to SE 25. See Java and Kotlin.
Snyk Code removed the fix examples from the fix analysis and Priority Score pages. See Priority Score.
Snyk Container
Snyk Container documents that Go standard library vulnerabilities are reported in container scans starting October 5, 2026. See Application vulnerabilities in Snyk Container and Snyk Open Source.
The container image inventory lists the minimum versions for base inventory (Snyk CLI 1.1303.0) and for provenance attestations (Snyk CLI 1.1307.0 or
snyk-monitor2.23.24), and notes that images scanned with earlier versions need a re-scan. See Container image inventory.
Snyk Integrations
Snyk documents how to configure IP allowlists for the GitHub Cloud App at the Organization and Enterprise levels. See GitHub Cloud App.
The Snyk Essentials GitHub setup guide now clarifies that the integration uses a classic personal access token (PAT) and adds guidance on generating it from a GitHub Billing Admin account. See GitHub for Snyk Essentials.
Other updates
Snyk Assist, an in-product AI assistant for product, security, and account questions, is now in Early Access on the Snyk Enterprise plan. Open it from the top-right corner of the Snyk Web UI in the new navigation. Group Admins manage it from Settings > Products and features. See Snyk Assist.
The Snyk Credits plan is now the Snyk Platform Subscription plan, and you can use your credits across all generally available Snyk capabilities. Snyk announces rate changes, including new products and pricing adjustments, 30 days in advance in the Billing and Usage dashboard. The Snyk Platform Access plan is no longer available to purchase or enroll in. See Snyk Platform credits.
The Your Plan page is now under Settings > Plan and billing after you select your Tenant in the scope selector. See Plan and billing.
Usage settings now explain that you can check your test limits and usage under Usage in your Organization settings, and that limits on Enterprise plans are set by your contract. See Usage settings.
The "Where things moved" table adds Ignore requests, Cloud, and Custom rules, and notes that the classic Organization Dashboard has no equivalent in the new navigation. See Navigate the Snyk Web UI.
Snyk documents that deleting a Group member removes the user from every Organization in the Group, and that deleting a Group membership through the API requires
cascade=true. See Manage users in a Group.A new guide covers migrating from legacy to v2 custom mapping. See Migrating from legacy to v2 custom mapping.
August 2026
Snyk Agent Security
Remediation Agent is now available in Early access. The agent opens autonomous pull requests that fix SCA and SAST vulnerabilities, adding a breaking-change assessment for SCA fixes and using the Agent Fix engine for SAST fixes. Visit Remediation Agent.
Agent Fix in the Pull Request experience is now generally available. Snyk removed the Early Access notices from the documentation. Visit Pull Request experience.
Snyk CLI
Secrets scanning in the Snyk CLI and on SCM imports now honors the
globalandsecretssections of the.snykfile, adding permanent path exclusions alongside the one-off--excludeflag. Snyk never scans excluded paths, so they do not appear as ignored issues. See Secrets scanning in the Snyk CLI.snyk secrets testis now in the CLI command reference, with its exit codes and the--include-ignores,--report, and--target-nameoptions. See snyk secrets test.snyk aibomdocumentation now covers the--enrichflag. See snyk aibom.snyk fixdocumentation now describes interactive fix application and an auto-approve option forsnyk fix --agentic. Visit Remediation Agent.
Snyk Code
Snyk Code Quality is retired. Snyk removed references to it from the IDE plugin and extension documentation. See the Snyk release process.
Snyk Code Local Engine documentation now consists of a deprecation notice. See Snyk Code Local Engine.
COBOL support in Snyk Code is now generally available on all plans and integrations. The documentation confirms support for SCM integrations, the Snyk CLI, IDEs, and CI/CD, and no longer carries Early Access or Snyk Preview notices. See COBOL.
Framework and language coverage in Snyk Code now includes Vert.x, Jolokia, and Spring Cloud Config for Java and LangChain for Python. The Python page also lists all seven supported AWS Lambda serverless triggers. See Python.
Snyk Container
Container image inventory is a new page in Snyk Container, covering issues, fix recommendations, related projects, and image content views for scanned images. See Container image inventory.
Provenance attestations now appear on the Image content tab of the container image inventory. Attestations require minimum Snyk CLI and snyk-monitor versions and a re-scan. See Container image inventory.
Evo by Snyk
Continuous Offensive Security (COS) is now generally available in Evo by Snyk, covering scan targets, authentication configuration, scope definition, findings, reports, and severity scoring. See Continuous Offensive Security.
Role-based access control in Evo by Snyk now includes an Organization-scoped user permission, which affects access and authentication, agent supply-chain security, COS scans and targets, Evo Chat, inventory, policies and issues, and reporting. See Access and authentication.
Evo by Snyk now documents the Model Risk Score taxonomy, and updates the AI risk framework mappings and guidance under AI-SPM risk intelligence. See Risk intelligence.
July 2026
Evo by Snyk
Evo by Snyk is now public. Visit Overview of Evo by Snyk for more details.
Agentic Development Security (ADS) is now GA, including Agent Behavior Governance, AI-SPM, and platform surfaces such as Evo Chat and Inventory. Visit Agent Behavior Governance for more details.
Snyk Code
OWASP and CWE mappings expanded, and the Snyk Code security rule pages now map each rule to the OWASP Top 10 2025, OWASP API Top 10 (2023), and OWASP Mobile Top 10 (2024), and note CWE Top 25 (MITRE) inclusion. Visit Snyk Code security rules for more details.
Rule Extensions is now GA, and impact testing is available in the Snyk Web UI, in addition to the API. Visit Rule Extensions for more details.
Snyk Secrets
Snyk Secrets is now GA, with documentation across the Snyk CLI, SCM integrations, and the VS Code, Visual Studio, Eclipse, and JetBrains IDE plugins. Visit Secrets scanning in the SCM for more details.
The
snyk secrets testcommand is now available for scanning secrets from the command line. Visit Secrets scanning in the Snyk CLI for more details.
Snyk API & Web
Bruno collections are now GA. You can now create an API target from a Bruno collection and configure its authentication. Visit Configure an API target with a Bruno collection for more details.
Automated target authentication configuration is now documented on a dedicated page. Visit Automate authentication configuration for more details.
Other updates
Unified IDE configuration is now GA across the Snyk IDE plugins. Visit Unified IDE configuration dialog for more details.
Snyk Container now reports vulnerabilities in the Go standard library, identified from the Go version recorded in the binary. Visit Application vulnerabilities in Snyk Container and Snyk Open Source for more details.
Notification emails for new vulnerabilities are now off by default, and a new section documents notification precedence rules. Visit Manage notifications for more details.
Snowflake Data Share added two fields to the prevention events dataset,
finding_branch_keyandfinding_asset_key. Visit Data share data dictionary for more details.
June 2026
Snyk CLI
Project tags can now be set from the command line: the
snyk code testcommand documents the new--project-tags=<TAG>[,<TAG>...]option, used with--reportto apply comma-separatedkey=valuetags (set--project-tags=to clear them). Visit snyk code test for more details.AI-BOM language support has expanded: the
snyk aibomcommand now generates a CycloneDX v1.6 AI-BOM for Projects written in Python, Java, JavaScript, or Go, up from Python only. Visit snyk aibom for more details.Upgrading is now documented on a dedicated page: the Snyk CLI docs add an "Upgrade the Snyk CLI" page covering how to update existing installations. Visit Upgrade the Snyk CLI for more details.
Standalone installation instructions were improved to clarify how to download and install the CLI binary directly. Visit Install or update the Snyk CLI for more details.
Snyk Container
Alpine 3.24 is now listed among the operating system distributions supported by Snyk Container. Visit Operating system distributions supported by Snyk Container for more details.
OpenJDK coverage improved: the "How Snyk Container works" documentation removes the previous openjdk8 limitation. Visit How Snyk Container works for more details.
Snyk Open Source
uv support was added: Snyk documents source-control-management (SCM) support for the Python uv package manager, available in Early Access. Visit Snyk for Python.
Go private dependencies are now documented: the Go language page adds setup guidance for scanning Projects that use private modules. Visit Snyk for Go for more details.
Package repository integrations expanded for Go: Snyk adds new setup pages for the Nexus and Artifactory repository managers with Go. Visit Package repository integrations for more details.
Snyk API & Web
Snyk API & Web (DAST) documentation is now live at docs.snyk.io, featuring a new overview that describes the product for dynamic application and API security testing. Visit Overview of Snyk API & Web.
Getting-started content was published for the product, including setup pages for adding users and enabling two-factor authentication. Visit Snyk API & Web for more details.
Other updates
Plan and billing information is now documented in a new tenant administration page that describes plan details and billing. Visit Plan and billing for more details.
SSO custom mapping assertions documentation was updated for single sign-on configuration. Visit Custom mapping for more details.
Export API added a prevention events dataset, with new columns and filters documented for exporting prevention data. Visit Export API specifications, columns, and filters for more details.
Snowflake data share added prevention events to the data-share data dictionary. Visit Data share data dictionary for more details.
Prevention reports documentation was published in Early Access under the Analytics Reports tab. Visit Prevention reports for more details.
Agent Fix guidance was updated on the page for fixing code vulnerabilities automatically. Visit Fix code vulnerabilities automatically for more details.
Repo Content Sync documentation was updated for Project repositories. Visit Snyk Repo Content Sync for more details.
Bitbucket for Snyk Essentials group-level integration documentation was updated. Visit Bitbucket for Snyk Essentials for more details.
Snyk Agent Red Teaming references were removed across the docs as the feature was retired.
May 2026
Snyk Analytics
The Pull request checks usage and performance report is now in GA for all plans, and PR check data is now available through the Export API.
The Zero-Day report now documents the Active security incident assessment banner, which surfaces assets needing triage, assets cleared, and the affected open source packages during a high-severity zero-day event.
Snyk CLI
The latest Snyk CLI version is v1.1304.0.
Added a new page for CLI support for uv, documenting Early Access support for the uv Python package manager across snyk test, snyk monitor, and snyk sbom, and extending coverage to Snyk IDE extensions, the Snyk MCP server, and Snyk GitHub Actions.
The snyk sbom command page now documents the --allow-incomplete-sbom flag, which generates an SBOM even when individual Projects fail to resolve.
The environment variables page has been updated to include SNYK_REQUEST_CONCURRENCY, which controls parallel dependency requests in container monitor.
Evo by Snyk
The aibom test command now validates a generated AI-BOM against your tenant's Evo policies in a single step.
redteam now documents the new exhaustive and eager scan modes, improved JSON output, and the vulnerability summary that appears in Snyk Agent Red Teaming results.
Other updates
The Snyk Code security rules section has been updated with new coverage for .NET: TLS protocol misconfiguration (CWE-326) across common .NET HTTP and network stacks, and broader insecure cipher detection (CWE-327) for C# and VB, including third-party support through BouncyCastle.
Snyk Container now supports extended Java runtime binary scanning in container test and container monitor.
Added documentation for automatic closure of obsolete Fix PRs, now in Early Access through Snyk Preview. Snyk closes Fix PRs when the targeted vulnerabilities are no longer present in your Project, whether resolved by a manual fix, a removed dependency, or a transitive update. Snyk closes up to five PRs per Project each day. See Snyk pull or merge requests.
The snyk_package_health_check directive is now in General Availability and is enabled by default in the Full MCP profile. The docs now reflect supported ecosystems: npm, PyPI, Maven, NuGet, and Go.
Snyk API & Web documentation now covers native GraphQL scanning, including schema ingestion through a URL, file upload, or introspection endpoint, and new GraphQL-specific authentication options.
Snyk API & Web compliance reporting now supports the OWASP Top 10:2025 standard, in addition to OWASP Top 10:2021.
April 2026
Snyk CLI
The Install the Snyk CLI page and sub-pages have been updated to reflect configuration best practice, including easily copied code snippets.
The Authenticate to use the Snyk CLI page has been updated to reflect best practice, including easily copied code snippets.
Snyk supported languages
CLI support for uv is now in Early Access.
Snyk now supports interfile analysis for Ruby.
Other updates
The
snyk_package_health_checkdirective is now available for the Full profile on the Directives page.CISA KEV has been added to the list of filters available in Issue vulnerability details.
The PR Checks Report is now General Available, with updates to Prevention Reports, Export API, and Snowflake Data Share.
The Pull Request experience documentation has been updated to reflect that if you are using inline comments or Agent Fix, you must now specify a dedicated GitHub account by providing a GitHub Personal Access Token (PAT) in your integration settings.
The Enterprise implementation guide now has embedded video tutorials to guide you in your Enterprise setup as a new user of Snyk.
The High availability mode from Snyk Broker is now enabled by default.
The Container registry sync from Snyk Container is now Generally Available.
The Container registry import policy API was enhanced by refactoring schema names, adding test components, and full CRUD operations.
March 2026
Evo by Snyk
Added the
aibom testcommand under Snyk CLI Help.Updated
redteamwith additional options, and also added Snyk Agent Red Teaming.
Snyk Analytics
The Analytics Overview tab now includes the Projects Monitored widget.
The Snyk Pull request checks usage & performance report is now in General Availability for Enterprise plan users.
Added the Assessing active security incidents option to the Zero-Day report.
Snyk CLI
The latest Snyk CLI version is 1.1303.2.
The environment variables page has been updated to include
SNYK_MAX_ATTEMPTS.
Other updates
The Open Source license compliance page has been updated to clarify that the Snyk database of supported licenses is regularly updated to match new releases of the SPDX License List.
The
package-health-checkdirective sample script links now point to the improved recipes repository in GitHub. Use the skills script or the hook script.For Snyk Container, the Configure repository monitoring feature is now in Early Access.
Snyk 2.0 introduces UI enhancements to the platform navigation and is available in Early Access. This is being rolled out gradually, so not all users see the new navigation at the same time. If you are an existing user, you can switch between the new and classic navigation at any time using the toggle in your user profile menu. What is different:
Global scope selector: the top bar serves as the primary tool to navigate between different levels of your account. Use the scope selector to switch between Tenant, Groups, and Organizations. When you select a scope, the side menu automatically displays the relevant tools and data for that area.
Analytics becomes the centralized location for all reporting, including overview reports, dependencies, and license information.
Settings becomes the unified area for managing members, billing, integrations, and account preferences. When you use the scope selector to switch between Groups and Organizations, all relevant settings for that area are displayed under Settings.
The Organization Dashboard has been replaced by the scope selector and the Analytics overview page (accessible only to Tenant users, at Tenant-level).
The License Policies page has been updated to reflect that newly supported licenses now have a default Severity of None and only appear in results if you explicitly configure this behavior.
The Enterprise implementation guide has been updated to reflect the actual journey you would take as a new user onboarding with Snyk on the Enterprise plan. This includes adding guidance on how to create your Organization Template, configure all available features, and includes key decision callouts to help guide you when making essential decisions in this process.
February 2026
Snyk CLI
Container SBOM has been updated with additional options.
The Snyk CLI latest release version is v1.1303.0.
Snyk Open Source
Breakability risk levels is now in Early Access.
Improved .NET scanning is now a General Availability feature. The .NET (C# and VB.NET section has been updated to reflect this change.
Snyk supported languages
Python has been updated to include support for Python version 3.12 for Snyk Code.
Snyk Code now supports C# 14 and .NET 10, Kotlin and Java (including Spring WebFlux and JAX-RS), JavaScript and TypeScript (including Sequelize), Go (including Fiber), and Swift (including grpc-swift).
Ruby 4.0 is supported in Snyk Code, starting with core parser improvements and stronger handling of Ruby modules.
Snyk Studio
A
snyk_package_health_checkdirective has been added to assist you in evaluating open-source packages for security vulnerabilities, maintenance health, community engagement, and popularity. Snyk has provided a secure dependency health check skill with a sample script and an enforce security scan on new packages hook with a sample script to integrate thesnyk_package_health_checkinto your workflow.Additional guidance on available MCP profile types and their applicable tools, with configuration instructions, has been added.
Other updates
Updated documentation references and rule mappings from OWASP Top 10 (2021) to the OWASP Top 10 (2025) revision. This keeps security-category labels and cross-references aligned with the OWASP taxonomy.
Broker Contexts was released for Universal Broker, including how contexts help segment and route Broker connections across environments and Organizations. This improves guidance for running multiple Broker deployments with clearer isolation.
January 2026
Snyk Code
The Snyk Code Security policies documentation has been updated to clarify that Snyk Code Security policies are different to Snyk Security Policies.
The Enable Snyk Agent Fix section has been enhanced with more details and clear configuration steps.
Snyk CLI
SBOM test command is now in Early Access.
The latest Snyk CLI version available is v1.1302.1.
The debugging mode of the Snyk CLI has been enhanced with error catalog codes and exit codes.
Snyk IDE
You can now use the Issue View Options in Eclipse, JetBrains, and Visual Studio Code to filter issues by their Code Consistent Ignores status.
The Risk Score Threshold option has been added to the Visual Studio Code extension to allow you to filter Open Source issues by their risk score.
Snyk Studio
The Agentic security with Snyk Studio documentation has been restructured to accurately reflect the workflow you would go through when using Snyk Studio for the first time, and using the available Quickstart guides.
The Snyk Studio Adoption report is now available under Redesigned analytics.
The supported tools list was updated to clarify that Snyk supports
snyk_send_feedback.
Snyk supported languages
PHP has been updated to include support for PHP version 8.5.
JavaScript was updated with support for Yarn 4.
Ruby was updated with support for Ruby 4.
Python has been updated to remove the limitation note for Projects with downloaded dependencies.
Go has been updated to include support for the Go standard library, for Go with Open Source.
Several supported language pages and their rules have been updated with Code analysis support in Early Access: Rust, Swift and Objective-C, Dart and Flutter, Groovy, Rust rules, Objective-C rules, Dart and Flutter rules, and Groovy rules.
Other updates
Container monitor has been updated to include a new CLI option
--prune-repeated-subdependenciesto prune depgraphs for large container scans.The redesigned Snyk Analytics experience is now in General Availability.
The Bitbucket Cloud documentation has been updated to make it clear that scopeless API tokens are not supported for this integration.
2025
2024
Last updated
Was this helpful?

