UPDATED 08:00 EST / MAY 01 2024

SECURITY

New Snyk service leverages AI for better application vulnerability prioritization

Cybersecurity startup Snyk Ltd. today announced the launch of AppRisk Pro, a new artificial intelligence and machine learning-powered offering that provides application context from third-party integrations to help address business-critical risks and accelerated fixes.

Designed for application security and development teams, Snyk AppRisk Pro creates a holistic understanding of application risk to equip teams with context based on how the application was built, the code it contains, its impact on the business and team responsibilities. Using the new service, AppSec teams are provided with the knowledge they require to make informed business decisions, such as prioritizing the most critical issues, while also allowing for collaboration across stakeholders within development workflows.

Snyk argues that overflowing vulnerability backlogs can lead to rigid security measures that hinder development progress and thwart developer productivity. The outdated, legacy-based approach also results in blind spots in security coverage and application prioritization, exposing businesses to unknown risks.

AppRisk Pro can trace insecure portions of deployed applications back to the specific code components that must be addressed in order to fix the issue. It also combines what the company calls a “unique level of prioritization” with proven developer-first tools for vulnerability prevention and remediation, underpinned and enabled by AI.

On the artificial intelligence side, AppRisk Pro uses AI to contextualize inputs from across security, runtime, secrets coverage management and observability solutions. Combined with Snyk’s own capabilities, the AI provides users with runtime intelligence throughout the life of the application.

The news service also includes integration with observability and runtime context from Dynatrace Inc., SentinelOne Inc. and Sysdig Inc. to assist users in understanding how an application operates. Developers and security professionals can use the service to prioritize which identified vulnerabilities are impacting their enterprise environments.

Another integration includes secret-related coverage management from Nightfall AI Inc. AppRisk Pro takes the data from Nightfall AI and expands its capabilities to accommodate more diverse program requirements. It also enhances visibility into application risk coverage based on secrets scanning, helping AppSec teams ensure that application code repositories and data sources do not include sensitive information such as passwords.

“Fueled in large part by AI-driven code, application development is accelerating at an unprecedented pace, and security teams worldwide are increasingly overwhelmed as a result,” Manoj Nair, chief product officer at Snyk, said ahead of the release. “Snyk AppRisk Pro now provides AppSec teams with a birds-eye view of their overall application security program from both a risk exposure and management coverage perspective, equipping and empowering them to now proactively drive both remediation and prevention.”

Image: Snyk

A message from John Furrier, co-founder of SiliconANGLE:

Your vote of support is important to us and it helps us keep the content FREE.

One click below supports our mission to provide free, deep, and relevant content.  

Join our community on YouTube

Join the community that includes more than 15,000 #CubeAlumni experts, including Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger, and many more luminaries and experts.

“TheCUBE is an important partner to the industry. You guys really are a part of our events and we really appreciate you coming and I know people appreciate the content you create as well” – Andy Jassy

THANK YOU