NEW YORK, Nov. 04, 2026 (GLOBE NEWSWIRE) — Apiiro, a leader in agentic development and software supply chain security, today announced that it has been named a Leader in The Forrester Wave™: Agentic Development Security Tools, Q4 2026.

Coding agents have unleashed software supply chain chaos and dramatically expanded the attack surface
Coding agents generate code, download dependencies, and execute commands and tools across endpoints and cloud environments. Every action can introduce vulnerabilities, malicious packages, or policy violations into the software supply chain. Security teams are racing to reduce existing vulnerability backlogs while coding agents continuously add new vulnerable and non-compliant code. With multiple agents running across multiple models and environments, the chaos is becoming harder to contain, creating an urgent need for a unified control plane for Agentic Development Security (ADS).

Existing security controls leave critical gaps
Code scanners identify vulnerabilities after code is generated but do not provide the software and risk context needed to prevent them in the first place. EDR protects monitored endpoints but does not automatically cover cloud-hosted coding agents. It also misses unknown malware hidden in dependencies because it lacks deep code analysis capabilities and software architecture context.

This exposes a critical gap: securing coding agents requires a deep understanding of the entire software architecture, from design and intent through first-party code and the software supply chain to application runtime and business risk. And do that for local coding agents and cloud-hosted coding agents.

That context must inform every security decision: preventing vulnerable and non-compliant code before it is generated, automatically fixing existing risks while validating changes and running tests to avoid breaking functionality, and protecting the tools and dependencies coding agents use against known and unknown threats.

The Forrester Agentic Development Security evaluation
Forrester evaluated 12 vendors on 29 criteria covering current offering and strategy, plus customer feedback. Apiiro was named as a Leader with the highest offering score. It received the highest possible score on 13 of 23 criteria. In some categories like AI SAST and in Secure by design – Apiiro was the only vendor with a perfect score of 5.

In total, Apiiro received the highest possible score in 16 criteria: AI SAST, AI application flaws, AI triage, AI prioritization, AI coding guardrails, AI coding toolchain, dependency firewall, AI discovery and inventory, ASPM for AI, SBOMs, governance reporting, integrations, secure by design, vision, innovation and adoption.

Equally important, Forrester gave Apiiro a strong vote of confidence on Apiiro’s vision for this market. Apiiro is the only vendor with a 5 in both Vision and Innovation criteria, and recognized as having “a strong and differentiated vision”.

We are also proud of the recognition from our customers. Apiiro is one of only two vendors out of 12 to earn Forrester’s halo for above average customer feedback, the highest level given in this Wave. As the report puts it, “Customers praise Apiiro for increasing visibility into application environments and helping teams focus on the risks that matter most.”

“Coding agents are the new perimeter,” said Idan Plotnik, Co-Founder and CEO of Apiiro. “We believe being named a Leader by Forrester reflects our vision: security must begin before code exists, across the entire software supply chain and follow coding agents wherever they run. By grounding security decisions in software architecture and risk context, Guardian Agent helps enterprises prevent new risks, fix existing vulnerabilities, and protect their AI development and supply chain from advanced attacks. We are proud to be named a Leader in this evaluation. We will keep pushing, executing and innovating as the market evolves, to keep our customers secure.”

Apiiro Guardian Agent
Guardian Agent acts as a control plane for multi-coding agents and multi-models across endpoints and cloud environments. It runs on Apiiro’s Context Graph: the Software Graph that maps architecture, data flows, AI assets and ownership from code to runtime and the Risk Graph that turns raw findings into risks, judged by real exposure and business impact. On top of this context, Guardian delivers three capabilities:

  • Guardian Prevent: Perform continuous AI threat model on every spec/plan/design, and enrich prompts with dynamic security context to prevent coding agents from generating vulnerable or non-compliant code.
  • Guardian AutoFix: Reduce vulnerability backlog by automatically fixing SAST, SCA, secrets, IaC, API and container risks, while running tests to avoid breaking changes.
  • Guardian Protect: Discover shadow AI, inventory dependencies and AI tools across endpoints and cloud host agents, and block unknown malware and backdoors.

To access the full report, visit:
https://apiiro.com/forrester-wave-agentic-development-security-tools?utm_source=press-release&utm_medium=pr&utm_campaign=forrester-wave-q4-2026

Source: The Forrester Wave™: Agentic Development Security Tools, Q4 2026, Forrester Research, Inc., November 4, 2026.

Supporting Resources

Forrester Disclaimer
Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. This report is part of a broader collection of Forrester resources, including interactive models, frameworks, tools, data, and access to analyst guidance. For more information, read about Forrester’s objectivity here.

About Apiiro
Apiiro is a leader in agentic development and software supply chain security, empowering application security and development teams to secure the entire agentic development lifecycle. Leading enterprises, including BlackRock, TIAA, USAA, Bloomberg, SoFi, and Shell, rely on Apiiro’s patented Deep Code Analysis (DCA) technology to continuously discover, inventory, and map their software architecture from code to runtime. This context powers automated assessment, detection, prioritization, remediation, and prevention of application risks at scale.

Media Contact:
Vicky Fornis
Director Of Business Operations at Apiiro
+972 54 805 3611
marketing@apiiro.com


Primary Logo

Media gallery

About The Author
Apiiro Inc