AI is shipping code faster than security was built to handle

Snyk has launched Evo Continuous Offensive Security (COS), an AI-powered penetration testing product designed to address the security gap created by AI-accelerated code production. Traditional pentesting averages only 15 days of coverage per year, leaving a 350-day window for attackers. Evo COS combines deterministic scanning for known vulnerability classes (SQLi, XSS) with LLM reasoning for context-dependent flaws like authorization bypasses and business logic errors. It ingests existing SAST, DAST, and SCA findings to start with application context rather than from scratch, and includes Agent Red Teaming to target LLM-integrated applications for prompt injection and data exfiltration. Output is delivered as exploit chains rather than isolated alert lists. The product is in early access with general availability targeted for Black Hat USA in August 2026.