NewParano.ai is now live. Read the launch announcement→
Parano.ai
Industry news · Updated weekly

Application Security Platforms industry news

Never miss what your AppSec competitors ship.

419 updates from 12 AppSec companies this past week. We read them all so you don't have to.

✓ Start tracking competitors within minutes
✓ Receive updates on their activities
✓ No credit card required

150,000+ companies tracked · 137M URLs counted · Tracking since 2025 · GDPR compliant · EU infrastructure

About this pageLast updated

This page collects Application Security Platforms industry news from the companies themselves. Parano.ai tracks 12 companies in this market, including Aikido, Aqua Security, Checkmarx, Endor Labs, Mend and 7 more, and turns what they publish and change into digestible intel reports, battlecards and sales enablement assets.

Updates in the latest digest
419from 12 companies
Latest digest covers
Oct 15 to Oct 22, 2026

Most active in the last 7 days, mostly changelog entries and event pages:

  • Endor Labs13 updates
  • Sonar5 updates
  • Semgrep4 updates

Every summary links to its public source.

Application Security Platforms news this week

Oct 15 – Oct 22, 2026

This is last week's digest for AppSec. Get one built for your actual competitors →

Executive Summary

  • Checkmarx OneCheckmarx launched Checkmarx Fusion, a hybrid security solution using Claude models and automated agents for vulnerability remediation, and partnered with Anthropic to offer its platform via the Claude Marketplace.
  • SnykSnyk launched Evo Agentic AppSec, a suite of security agents designed to find, fix, and block vulnerabilities by automating the security fix loop for AI-generated code.
  • Wiz CodeWiz released Wiz Red Agent for AI-powered continuous penetration testing and launched Wiz AI Agents within its FedRAMP High authorized WIZ FOR GOV environment.
  • AikidoAikido launched Noon, an AI-native workforce security platform, following the acquisitions of Cyberly and Outkept.
  • Endor LabsEndor Labs introduced Bring Your Own Key (BYOK) support for AI SAST and AI Chat to enable data residency and privacy compliance for regulated industries.
  • MendMend.io released the Mend Guardrails SBX Kit to provide security guardrails and traffic interception for AI coding agents running in Docker Sandboxes.
  • SemgrepSemgrep released a new integration for Cursor Origin that performs automatic security scans on every pull request.
  • OrcaOrca Security enhanced its Zscaler Private Access integration to provide automated asset labeling and network context for improved exposure analysis.
14 sources
  1. Checkmarx One — Checkmarx Expands Partnership with Anthropic and Launches Checkmarx Fusion
  2. Checkmarx One — Checkmarx Announces Partnership with Anthropic and Checkmarx Fusion
  3. Checkmarx One — Checkmarx Joins the Claude Marketplace via Anthropic
  4. Snyk — Snyk Launches Evo Agentic AppSec AI Security Agents
  5. Snyk — Snyk Launches Evo Agentic AppSec Security Agent Suite
  6. Snyk — Evo Agentic AppSec Automates the Security Fix Loop
  7. Wiz Code — Wiz.io Launches Wiz Red Agent for AI-Powered Pen-Testing
  8. Wiz Code — Wiz Corp Launches Wiz AI Agents in FedRAMP High Environment
  9. Aikido — Aikido Launches Noon Workforce Security Platform and Acquires Two Companies
  10. Aikido — Aikido Launches Noon Workforce Security Platform
  11. Endor Labs — Endor Labs Launches BYOK Support for AI SAST
  12. Mend — Mend.io Releases Mend Guardrails SBX Kit for Docker Sandboxes
  13. Semgrep — Semgrep Rolls Out Security Scanning for Cursor Origin
  14. Orca — Orca Security Enhances Zscaler Private Access Integration

Tracking 12 AppSec vendors like this?

150,000+companies tracked
137MURLs counted
7.9Mpages analysed

Tracking since 2025 · GDPR compliant · EU infrastructure

Latest Application Security Platforms company updates

Today
Semgrepabout 6 hours ago
LinkedInProduct

Semgrep Rolls Out Detect-2Shell Workflow for Node and PHP Vulnerabilities

Endor Labs10about 7 hours ago
WebChangelog

Endor Labs Fixes Path Traversal Vulnerability in local-operator

WebChangelog

PyJWT Vulnerability Affects HMAC Token Security Prior to 2.14.0

WebChangelog

Endor Labs Details Fleet Authentication Bypass Vulnerability

WebChangelog

Endor Labs Details vm2 Security Advisory for node:sqlite

WebChangelog

Endor Labs Details Capacitor Android and iOS Security Vulnerability

WebChangelog

PyJWT Vulnerability Affects HMAC Token Verification

WebChangelog

Podman Vulnerability Bypasses Container Creation Restrictions

WebChangelog

Endor Labs Details simple-git Unsafe Command Configuration Vulnerability

WebChangelog

Endor Labs Details Security Vulnerability in StAX Validator

WebChangelog

Endor Labs Details vm2 Security Advisory Regarding HTTPS Credentials

Yesterday
Orca Securityabout 9 hours ago
LinkedInEvent

Orca Security Hosts Orcathon Innovation Event

Tracking 12 AppSec vendors like this?

Mendabout 14 hours ago
LinkedInEvent

Mend Celebrates Team Gathering and New Hire in Cracow

Sonar2about 18 hours ago
WebBlog

Sonar Enables Remediation Agent to Fix Hunter Agent Findings

WebBlog

Sonar Explains Agentic Centric Development Cycle (AC/DC) Workflows

OX Security1 day ago
LinkedInEvent

OX Security Hosts OX After Hours Event in Tel Aviv

Oct 25
Semgrep1 day ago
LinkedInProduct

Semgrep Releases Detect-2Shell Workflow to Identify Vulnerable Node and PHP Versions

Wiz2 days ago
LinkedInEvent

Wiz Code Launches First IRL Halloween CTF in NYC

Oct 24
Sonar3 days ago
LinkedInEvent

SonarQube Shares Upcoming Webinar Series for Gitar Verification Agent

Orca Security3 days ago
WebCase Study

Orca Achieves Zero Critical Vulnerabilities for Customer in 30 Days

Endor Labs3 days ago
LinkedInBlog

Endor Labs Shares Applied AI Playbook for AppSec

Oct 23
Snyk24 days ago
LinkedInPartnership

Snyk Joins SpaceX Super Intelligence as a Launch Partner

LinkedInProduct

Snyk Launches Evo Agentic AppSec to Combat AI-Driven Vulnerabilities

Aikido34 days ago
LinkedInPartnership

Aikido Joins SpaceX Super Intelligence Partner Network

LinkedInProduct

Aikido Expands Free PHP2Shell Fix Coverage to Legacy PHP Versions

LinkedInNews

Aikido Co-Founder Discusses AI-Driven Cybersecurity Threats in Reuters

Sonar24 days ago
LinkedInPartnership

Sonar Joins SpaceX Super Intelligence Partner Network

LinkedInBlog

SonarQube Shares Guide to Mitigating PHP2Shell Vulnerabilities

Semgrep24 days ago
LinkedInProduct

Semgrep Integrates PHP2Shell Vulnerability Detection into Guardian Plugin

LinkedInEvent

Semgrep Discusses Risks of Rapid Deployment at Gartner Symposium

Checkmarx4 days ago
LinkedInCase Study

Checkmarx One Drives Rapid Vulnerability Remediation for Global Fintech

Orca Security4 days ago
LinkedInProduct

Orca Launches Discovery AI Powered by Amazon Bedrock

Mend4 days ago
LinkedInEvent

Mend Discusses AI Security Challenges at GPSEC Philadelphia

Endor Labs24 days ago
LinkedInPartnership

Endor Labs Joins SpaceX Super Intelligence Partner Network

LinkedInCareers

Endor Labs is Hiring for Engineering and Security Roles

Oct 22
Snyk25 days ago
WebProduct

Snyk Launches Evo Remediation Agent in Open Preview

WebBlog

Snyk Explains Critical PHP Remote Code Execution Vulnerabilities

Application Security Platforms companies we track

  • Aikido
  • Aqua Security
  • Checkmarx
  • Endor Labs
  • Mend
  • Orca Security
  • OX Security
  • Semgrep
  • Snyk
  • Sonar
  • Veracode
  • Wiz

Get this for your actual competitors.

Pick up to 10 companies. Your first digest lands next Monday — with AI-written summaries of every update we find.

No credit card required

Parano.ai · Industry news · AI-Powered Competitive Intelligence