Apiiro, a leader in agentic development and software supply chain security, has announced that it has been named a Leader in The Forrester Wave: Agentic Development Security Tools, Q4 2026. Apiiro received the highest possible scores in 16 evaluation criteria, including vision, innovation, and AI coding guardrails.
Apiiro named a Leader in The Forrester Wave: Agentic Development Security Tools, Q4 2026
Apiiro was named as a Leader with the highest offering score
It received the highest possible score in 16 criteria, including AI SAST, AI coding guardrails, and secure by design
Apiiro is the only vendor with a 5 in both Vision and Innovation criteria
Apiiro is one of only two vendors out of 12 to earn Forrester's halo for above average customer feedback
Apiiro's Guardian Agent acts as a control plane for multi-coding agents and multi-models across endpoints and cloud environments
Coding agents generate code, download dependencies, and execute commands and tools across endpoints and cloud environments. Every action can introduce vulnerabilities, malicious packages, or policy violations into the software supply chain. Security teams are racing to reduce existing vulnerability backlogs while coding agents continuously add new vulnerable and non-compliant code. With multiple agents running across multiple models and environments, the chaos is becoming harder to contain, creating an urgent need for a unified control plane for Agentic Development Security (ADS).
Code scanners identify vulnerabilities after code is generated but do not provide the software and risk context needed to prevent them in the first place. EDR protects monitored endpoints but does not automatically cover cloud-hosted coding agents. It also misses unknown malware hidden in dependencies because it lacks deep code analysis capabilities and software architecture context.
This exposes a critical gap: securing coding agents requires a deep understanding of the entire software architecture, from design and intent through first-party code and the software supply chain to application runtime and business risk. And do that for local coding agents and cloud-hosted coding agents.
That context must inform every security decision: preventing vulnerable and non-compliant code before it is generated, automatically fixing existing risks while validating changes and running tests to avoid breaking functionality, and protecting the tools and dependencies coding agents use against known and unknown threats.
Forrester evaluated 12 vendors on 29 criteria covering current offering and strategy, plus customer feedback. Apiiro was named as a Leader with the highest offering score. It received the highest possible score on 13 of 23 criteria. In some categories like AI SAST and in Secure by design, Apiiro was the only vendor with a perfect score of 5.
In total, Apiiro received the highest possible score in 16 criteria: AI SAST, AI application flaws, AI triage, AI prioritization, AI coding guardrails, AI coding toolchain, dependency firewall, AI discovery and inventory, ASPM for AI, SBOMs, governance reporting, integrations, secure by design, vision, innovation and adoption.
Equally important, Forrester gave Apiiro a strong vote of confidence on Apiiro's vision for this market. Apiiro is the only vendor with a 5 in both Vision and Innovation criteria, and recognized as having "a strong and differentiated vision".
We are also proud of the recognition from our customers. Apiiro is one of only two vendors out of 12 to earn Forrester's halo for above average customer feedback, the highest level given in this Wave. As the report puts it, "Customers praise Apiiro for increasing visibility into application environments and helping teams focus on the risks that matter most."
"Coding agents are the new perimeter," said Idan Plotnik, Co-Founder and CEO of Apiiro. "We believe being named a Leader by Forrester reflects our vision: security must begin before code exists, across the entire software supply chain and follow coding agents wherever they run. By grounding security decisions in software architecture and risk context, Guardian Agent helps enterprises prevent new risks, fix existing vulnerabilities, and protect their AI development and supply chain from advanced attacks. We are proud to be named a Leader in this evaluation. We will keep pushing, executing and innovating as the market evolves, to keep our customers secure."
Guardian Agent acts as a control plane for multi-coding agents and multi-models across endpoints and cloud environments. It runs on Apiiro's Context Graph: the Software Graph that maps architecture, data flows, AI assets and ownership from code to runtime and the Risk Graph that turns raw findings into risks, judged by real exposure and business impact. On top of this context, Guardian delivers three capabilities:
Perform continuous AI threat model on every spec/plan/design, and enrich prompts with dynamic security context to prevent coding agents from generating vulnerable or non-compliant code.
Reduce vulnerability backlog by automatically fixing SAST, SCA, secrets, IaC, API and container risks, while running tests to avoid breaking changes.
Discover shadow AI, inventory dependencies and AI tools across endpoints and cloud host agents, and block unknown malware and backdoors.
About Apiiro
Apiiro is a leader in agentic development and software supply chain security, empowering application security and development teams to secure the entire agentic development lifecycle. Leading enterprises, including BlackRock, TIAA, USAA, Bloomberg, SoFi, and Shell, rely on Apiiro's patented Deep Code Analysis (DCA) technology to continuously discover, inventory, and map their software architecture from code to runtime. This context powers automated assessment, detection, prioritization, remediation, and prevention of application risks at scale.
