As AI Risk Scales and Vulnerabilities Compound, Evo by Snyk Reaches 60% of New Deal Volume

Snyk said Evo, its agent-native AI security layer, now represents 60% of new deal volume and has increased average contract value by 30%. Since its first capability became generally available in March 2026, Evo has delivered 81.5% month-over-month customer growth, signaling rapid enterprise adoption of AI security tools in production environments.

Analysis

There is no direct listed-security read-through from Snyk, but the relevant public basket is application-security and developer-tooling vendors: PANW, CRWD, TENB, RPD, GTLB and FROG. A credible expansion in AI-native application-security budgets would favor platforms with embedded developer workflows and broad enterprise distribution over point vulnerability scanners; PANW and CRWD have the clearest ability to bundle this capability into larger platform renewals, while GTLB/FROG have the most direct developer-seat adjacency. The second-order risk for TENB and RPD is not immediate revenue loss, but lower standalone valuation tolerance if buyers redirect incremental security budget toward code-to-production AI controls rather than legacy exposure-management tools.

The disclosed adoption metrics are company-reported, cover a very short post-launch interval, and cannot yet establish durable ARR, retention, gross-margin, or sales-efficiency improvement. The near-term market implication is likely limited because the asset is private and the stated impact is below the threshold for changing public-company estimates. Over the next 1-3 months, the investable catalyst is whether PANW, CRWD, GTLB or FROG cite AI-agent security as a separate upsell driver in earnings calls or raise remaining-performance-obligation/large-deal commentary; absent that, this is narrative confirmation rather than a trade signal.

Contrarian view: security investors may over-extrapolate AI-security demand into a new budget category. Enterprise buyers may instead consolidate agent-security controls into existing CNAPP, identity, endpoint and DevSecOps contracts, creating pricing power for incumbent platforms rather than expanding total spend. The thesis is falsified if public vendors report AI-security attach rates without higher ACV or if developer-tool consolidation causes net retention or billings deceleration despite strong AI product usage.

Key Decisions for Investors

• No standalone position on this announcement: Snyk is private and the disclosed data lacks ARR, retention, customer concentration and gross-margin evidence needed to underwrite a public-market read-through.
• Add PANW and CRWD to an earnings-watch basket for the next 1-3 months; initiate incremental longs only if management quantifies AI/application-security upsell or raises large-platform-deal expectations. Preferred structure: long PANW or CRWD versus short RPD, sized modestly, to isolate platform-consolidation risk.
• Monitor GTLB and FROG for evidence that security functionality raises enterprise-seat expansion rather than merely improves product engagement. A long position is warranted only after billings/RPO acceleration or guidance support; otherwise AI-security enthusiasm is unlikely to offset developer-tool budget scrutiny.
• For a relative-value hedge over 6-12 months, consider long PANW / short TENB only if TENB shows slowing enterprise deal size or weaker net retention while PANW sustains platformization growth. Cover the short if TENB demonstrates improving exposure-management growth or material AI-security attach rates without pricing pressure.