--- title: "Remediation Agents and Agentic AppSec Explained" url: https://daily.dev/posts/remediation-agents-and-agentic-appsec-explained-nx3e6g4ex source_url: https://snyk.io/blog/remediation-agents-demystified type: article source: "Snyk" published: 2026-08-20T13:12:08.079Z updated: 2026-08-20T13:12:35.267Z tags: ["security", "ai-agents", "appsec"] reading_time: 7 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Remediation Agents and Agentic AppSec Explained **[Snyk](https://daily.dev/sources/snyk)** · 7 min read · 1 upvotes · 0 comments ## Summary Snyk's Remediation Agent, now in public preview, aims to close the gap between finding and fixing vulnerabilities, addressing a reported ratio of six new security issues for every one remediated. Rather than a naive LLM-driven fix (which required heavy developer review and rejected most changes), the agent acts as an orchestration layer feeding a model ten years of Snyk's application security knowledge: breakability assessments for upgrades, package health and reachability scores, SAST fix generation, and ecosystem playbooks written by security engineers. Internal results cited are a 94% improvement in mergeable SCA fixes and 13% improvement in mergeable SAST fixes. A live demo showed both an IDE path (via a /snyk-fix skill and Snyk Studio MCP server in Cursor, Windsurf, Antigravity, or VS Code) and a CLI path (snyk fix --agentic --experimental --sca) fixing vulnerabilities in OWASP Juice Shop, including a multer and Glob upgrade. Every fix still ends at a pull request requiring developer sign-off, though an autonomous variant that generates finished PRs is in active development. The Remediation Agent is free for current Snyk customers during the feedback-driven preview, and free for open source maintainers via Snyk's Secure Developer Program. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is Snyk's Remediation Agent and how does it work? It is an orchestration layer, now in public preview, that sits between a developer's chosen LLM and Snyk's intelligence on every tracked issue and CVE. It supplies breakability assessments for open source upgrades, package health and reachability scores, SAST fix generation via Agent Fix, and ecosystem playbooks, then re-runs scans and unit tests to confirm fixes are genuine before opening a pull request. _Teams weighing AI-assisted vulnerability remediation can track how tools like this evolve on daily.dev._ ### How much better are Snyk's AI-generated fixes when the model is given Snyk's security knowledge versus a plain LLM approach? Internal testing showed a 94% improvement in mergeable SCA (open source dependency) fixes and a 13% improvement in mergeable SAST fixes compared to simply pointing an LLM at the security backlog, with most internally generated SAST fixes now merging as-is at lower token cost. The naive LLM-only approach required developers to review and reject most proposed changes. _Developers evaluating AI remediation tooling can follow benchmark results like these on daily.dev._ ### How do I run Snyk's agentic fix feature from the CLI? Use the command snyk fix --agentic --experimental --sca, which lists every package it believes it can upgrade alongside current and recommended target versions and a breakability score. Developers can choose to fix everything, fix only low-breakability items, select specific findings, or converse with the agent to ask why a given upgrade was rated high risk. _Anyone piecing together CLI-based vulnerability workflows can find practical walkthroughs like this on daily.dev._ ## Similar posts on daily.dev - [The full Snyk AI Security Platform, free for open source maintainers](https://daily.dev/posts/the-full-snyk-ai-security-platform-free-for-open-source-maintainers-im8kpokj0) · Snyk · 0 upvotes · 0 comments - [Snyk and Atlassian Unveil Intelligent Remediation for Jira](https://daily.dev/posts/snyk-and-atlassian-unveil-intelligent-remediation-for-jira-ekdotppha) · Snyk · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/remediation-agents-and-agentic-appsec-explained-nx3e6g4ex)