DevAssure

Evo by Snyk is a security and governance platform for AI-native applications, agentic development, and AI systems. It provides continuous visibility, governance, testing, and real-time control across the AI software lifecycle. Its Agentic Development Security capability discovers models, agents, MCP servers, datasets, plugins, tools, and services used by agents across repositories; generates an AI bill of materials; applies policy and guardrails to agent actions; and validates AI-generated code before it reaches repositories, pipelines, or production. Its Continuous Offensive Security capability autonomously stress-tests applications and AI systems like an adversary, with agents coordinating reconnaissance, vulnerability hunting, exploit validation, remediation, and reporting, and an independent validation model intended to confirm exploitability before reporting findings. Testing is intended to run on code changes and pull requests.

An AI software engineering agent developed by Cognition that runs isolated cloud coding sessions, writes and modifies code, and can test applications through a browser. Devin is designed as an end-to-end software-development environment for planning and implementing coding tasks. Vals evaluated it internally and increased its adoption after finding it to be token-efficient.

An AI software-development agent from Replit that builds, modifies, publishes, and deploys applications from natural-language prompts. It can generate user interfaces and databases, implement application workflows such as electronic signing and checkout, connect custom domains, and manage deployment.

Probity is an open-source project by Nizar Selander that provides tooling to enforce test-driven development (TDD) guardrails for AI coding agents. It is designed to run and validate automated tests and checks against code produced by AI agents to ensure adherence to TDD workflows.

Armadin Red is Armadin’s AI-driven offensive red-teaming offering. It uses swarms of autonomous agents to map a customer’s network, continuously probe for changes and exploitable risk, and verify identified exploits to reduce false positives. The service is presented as an alternative to periodic penetration testing, with attacks running continuously at machine speed.