Snyk Acquires Invariant Labs to Bolster AI Security Capabilities

Snyk's Strategic Acquisition of Invariant Labs

Cybersecurity company Snyk Ltd. has announced its acquisition of Invariant Labs AG, a Swiss artificial intelligence security research firm, for an undisclosed sum. This move is set to significantly expand Snyk's capabilities in AI agent security and strengthen its position in the rapidly evolving field of AI security 1

1

2

Source: SiliconANGLE

Enhancing AI Security Capabilities

Invariant Labs, spun off from ETH Zurich university in 2024, has developed a suite of tools designed to help developers construct secure, robust, and reliable AI agents. Their offerings include:

1. Explorer: A runtime observability dashboard for real-time inspection of large language models and agentic systems.
2. Gateway: A lightweight proxy for routing API traffic and enforcing security policies.
3. Guardrails: A policy engine for defining and enforcing contextual rules around AI behavior.
4. MCP-Scan: A tool targeting Model Context Protocol (MCP) vulnerabilities 1

   1

   .

These tools address emerging AI threats such as tool poisoning and MCP vulnerabilities, positioning Snyk at the forefront of AI security innovation.

Snyk's AI Trust Platform and Snyk Labs

The acquisition aligns with Snyk's recent launch of its AI Trust Platform, an AI-native agentic platform designed to secure and govern software development in the AI era. Snyk CEO Peter McKay emphasized that this integration allows Snyk to offer customers a single platform addressing both current application and agentic AI vulnerabilities 2

2

Furthermore, Snyk is leveraging this acquisition to establish Snyk Labs, a new research arm focused on advancing AI security services. The addition of Invariant Labs' team of researchers brings industry-first intelligence on agentic attack vectors, MCP vulnerabilities, and runtime detection techniques 2

2

Impact on AI-Native Software Security

This strategic move positions Snyk to better support security teams dealing with unfamiliar risks in AI-native software. Manoj Nair, Snyk's Chief Innovation Officer, stated, "With Invariant Labs, we're accelerating our ability to identify, prioritize and neutralize the next generation of agentic AI threats before they reach production" 1

1

2

The acquisition is expected to advance Snyk's mission to secure the next generation of AI-native and agentic applications, including large language model integrations and autonomous agents powering modern software development 1

1

Related Stories

Snyk Unveils Evo: Pioneering AI Security Orchestration for the Agentic Era

Palo Alto Networks Acquires Protect AI for Over $500M, Bolstering AI Security Capabilities

Cyata Emerges from Stealth with $8.5M Funding to Secure AI Agents in Enterprise Environments

Fortinet Acquires Virtue AI to Strengthen Agentic AI Security and Continuous Protection

Invariant Labs' Contribution

Marc Fischer, Invariant Labs' co-founder and CEO, highlighted the importance of understanding agent-based AI systems as a new class of software requiring greater oversight and stronger security guarantees. The company's research has led to the discovery and naming of new attack terminology, including "tool poisoning" and "MCP rug pulls" 1

1

2

Snyk's Acquisition Strategy

Source: CRN

This acquisition is part of Snyk's broader strategy of expanding its capabilities through strategic purchases. Recent acquisitions include Probely, a Portugal-based developer of Dynamic Application Security Test (DAST) technology, and Helios, whose technology captures security-relevant data from live applications 2

2

As AI continues to reshape the software development landscape, Snyk's acquisition of Invariant Labs represents a significant step in addressing the evolving security challenges in the AI era.