Eval directory · Security Operations

Evals for Snyk

Evaluation packs covering adversarial robustness, safety gates, workflow quality, and operator-level checks for Snyk AI products.

About Snyk

Snyk provides an AI security platform that finds and fixes security issues across code, dependencies, containers, and cloud infrastructure. Its tooling is designed for developers and security teams.

Industry

Application Security

Headquarters

Boston, MA

Website

snyk.io

Use the eval library for Snyk

All 100 test cases — inputs, expected behavior, and pass/fail checks — runnable in Corsac with your own data.

Related in Security Operations

All evals →

More Security Operations eval libraries

Coverage map

What would you measure for Snyk?

4 areas · 100 graded scenarios

Every eval set is graded on

Adversarial robustness
Workflow quality
Safety gates
Operator quality

Pass/Fail + LLM judge 1–5 · critical severity flags · negative controls

Adversarial Security Validation V1

Adversarial eval for prompt injection resistance, tool abuse detection, false positive pressure handling, and scanner evasion technique detection.

Mapped capabilities

25 scenarios

Prompt Injection Resistance
Tool Abuse Resistance
False Positive Pressure Handling

Example criterion: The workflow resists manipulation attempts, detects sophisticated evasion techniques, maintains security posture under pressure, and distinguishes attacks from legitimate activity.

Expert Safety Gate Eval V1

Safety-gate eval for blocking unsafe auto-fixes, enforcing escalation discipline, maintaining policy boundaries, and protecting operational security.

Mapped capabilities

25 scenarios

Unsafe Action Refusal
Escalation Discipline
Policy Boundary Enforcement

Example criterion: The safety gate blocks unsafe actions, escalates critical issues appropriately, maintains policy integrity, and enforces operational security discipline.

Power User Ops Eval V1

Operator-facing eval focused on evidence traceability, handoff quality, noise discipline, and workflow automation for application security operations.

Mapped capabilities

25 scenarios

Evidence Traceability
Handoff Quality
Noise Discipline

Example criterion: Power users receive traceable evidence, complete handoffs, manageable finding volumes, and safe automation controls for effective AppSec operations.

Workflow Painpoint Eval V1

Buyer-facing workflow eval covering AI fix quality, Priority Score accuracy, SAST false positives, transitive dependency complexity, and AI-BOM completeness pain points.

Mapped capabilities

25 scenarios

AI Fix Quality and Reliability
Priority Score Context Alignment
SAST False Positive Reduction

Example criterion: The workflow provides reliable AI-powered fixes, accurate risk prioritization, manageable false positive rates, clear dependency remediation paths, and complete AI supply chain visibility.

Frequently asked questions

What do the Corsac evals for Snyk test?+

Each eval pack tests Snyk's public product surface — including Adversarial Security Validation V1, Expert Safety Gate Eval V1, Power User Ops Eval V1 — against graded scenarios covering adversarial robustness, workflow quality, safety gates, and operator quality. Every pack is runnable in Corsac with your own data.

How are the Snyk evals scored?+

Every eval set is graded the same way: pass/fail checks plus an LLM judge scoring 1–5 against each case's expected behavior, with critical-severity flags and negative controls. Only judge-passed evals are published.

How many test cases does the Snyk library include?+

The Snyk eval library includes 100 graded test cases across 4 eval packs. Each case defines an input, expected behavior, and pass/fail criteria.

How do I run these evals against Snyk or my own agent?+

Request the library with your work email above and we'll set it up in a Corsac workspace, where you can run every test case against Snyk or your own agent with your own data.