Model and agent supply chain · #2 by signal score
Invariant Labs
Research-led agent security: MCP-Scan (now Snyk Agent Scan) finds tool poisoning, rug pulls, and cross-server tool shadowing in MCP servers and agent skills, alongside Guardrails and Explorer for runtime rules and agent trace inspection. Acquired by Snyk in 2025.
Acquired by Snyk, announced 2025-06-24, closed 2025-06-24. Now sold as Snyk Agent Scan.
25Signal score / 100
- Capital
- 0/35
- Product
- 15/25
- Standards
- 0/20(not yet assessed)
- Momentum
- 10/20
Identity primitives
| Agent as a first-class identity | Not checked |
| On-behalf-of token exchange | Not checked |
| Cross App Access (ID-JAG) | Not checked |
| Asynchronous human approval (CIBA) | Not checked |
| MCP authorization conformance | Not checked |
| Fine-grained authorization | Not checked |
| Short-lived, secretless credentials | Not checked |
| Token vault | Not checked |
| Kill switch | No public claim found |
| Per-action audit chain | No public claim found |
Company
HQ: CH
Funding: Not disclosed
Product: Snyk Agent Scan
Open source
3,081 stars · 22 contributors
Last push 2026-09-23
Sources
- Invariant Labs (vendor, accessed 2026-09-24)
- Introducing MCP-Scan (vendor, accessed 2026-09-24)
- Snyk Labs: Agent Scan skill inspector (vendor, accessed 2026-09-24)
- Snyk acquires Invariant Labs to accelerate agentic AI security innovation (press-release, accessed 2026-09-24)
Last verified 2026-09-24.