Sysdig

Wiz is an AI cybersecurity platform for cloud and AI applications. It connects code, cloud, identities, network, and runtime in a unified security graph, using that context to scan attack surfaces, model lateral movement, privilege escalation, and data-access paths, detect exploitation, and generate code or infrastructure fixes. The videos describe its customer-side CVE scanning as producing security reports and discuss using agents to remediate vulnerabilities.

Semgrep is an application security platform for static application security testing, open-source dependency analysis, secrets detection, and malware protection. Its analysis combines deterministic, rule-based scanning with AI reasoning about code context, naming, structure, and developer intent; findings can be surfaced and remediated through the CLI, CI/CD systems, IDEs, pull-request checks, APIs, webhooks, and supported AI-tool integrations. In the described workflow, Semgrep is used as a local verification gate alongside repository rules and pull-request review before a code change is considered complete.

Evo by Snyk is a security and governance platform for AI-native applications, agentic development, and AI systems. It provides continuous visibility, governance, testing, and real-time control across the AI software lifecycle. Its Agentic Development Security capability discovers models, agents, MCP servers, datasets, plugins, tools, and services used by agents across repositories; generates an AI bill of materials; applies policy and guardrails to agent actions; and validates AI-generated code before it reaches repositories, pipelines, or production. Its Continuous Offensive Security capability autonomously stress-tests applications and AI systems like an adversary, with agents coordinating reconnaissance, vulnerability hunting, exploit validation, remediation, and reporting, and an independent validation model intended to confirm exploitability before reporting findings. Testing is intended to run on code changes and pull requests.

Semgrep Guardian is a security tool for coding agents that installs hooks and an MCP server to scan each file immediately after an agent writes it. It detects hardcoded secrets, vulnerable code patterns, and malicious packages, using Semgrep's program-analysis harness to provide LLMs with data-flow and dependency context. The product is offered with a 60-day free trial.

Snyk Agent Scan is an AI security tool from Snyk that analyzes MCP server definitions, including configurations such as Cursor and VS Code mcp.json files, for tool poisoning, toxic flows, and prompt injection. The video also describes scanning MCP tool definitions and server code as part of combining agent-security checks with application-security analysis.