SAN FRANCISCO, Nov. 04, 2026 (GLOBE NEWSWIRE) -- Cycode, the leader in Agentic Development Security, today announced Citizen Developer Security, extending AI guardrails, workstation protection, and code security to every employee who builds with agents. Available now in private preview, Citizen Developer Security gives teams visibility into every AI builder and unmanaged codebase, protects their devices and AI interactions, and secures the applications they create.
Development is no longer limited to engineers. Employees in every function now use AI agents that generate code, install packages, pull dependencies, connect to company data, handle secrets, and deploy applications. Most of this happens without a repository or pipeline and out of sight of security teams.
“Today, everyone is a developer,” said Lior Levy, co-founder and CEO of Cycode. “That’s a huge unlock for both innovation and risk. Cycode already secures how engineers and coding agents build software. Now we’re giving security leaders governance and control across every AI builder and citizen developer in their organization. The goal is simple: let everyone develop securely.”
Established security controls weren't designed around citizen developers. Security checks don’t extend to unmanaged codebases, training can't keep up, and remediation breaks down when the person who creates the risk can’t understand or fix it.
Cycode secures citizen developers on the workstation, at the prompt, and in every application they ship, through three integrated capabilities:
- Discover every AI builder and unmanaged codebase. A living inventory of citizen developers and unmanaged codebases, plus the coding agents, Model Context Protocol (MCP) servers, and AI tools they use, with no surveys or self-reporting. The Cycode Context Intelligence Graph (CIG) connects each builder to their team, devices, applications, and risks.
- Protect every device and prompt. Cycode Workstation Protection blocks malicious packages before they are installed. AI Guardrails keep secrets and sensitive data out of prompts, agent file reads, and MCP calls. Policy controls govern which AI tools and MCP servers agents can use.
- Secure every application and agent output. Cycode scans what agents produce, from code and dependencies to secrets and cloud configuration, before it reaches production. It also feeds security context to agents so they build more securely from the first prompt.
When risks emerge, Cycode addresses them without blocking the builder. For example, when a newly published package fails a cooldown policy, Cycode blocks the install and selects a safe alternative so the build keeps going. When an agent generates vulnerable code, Cycode triages the issue, generates the fix, and adapts AI rules to turn every detection into prevention.
“Citizen developers don’t need to know how to code. They shouldn’t need to know how to remediate vulnerabilities either,” said Dor Atias, co-founder and chief product officer at Cycode. “You can’t hand a marketer a Jira ticket and expect a fix. Cycode closes that gap. It catches risk as agents build, fixes it within the policy the security team sets, and keeps the builder moving. This empowers anyone in the organization to turn an innovative idea into secure software.”
By extending the same platform that already secures the software supply chain and the agentic development lifecycle (ADLC) to citizen developers, Cycode gives CISOs one policy and one view of risk across engineers, coding agents, and every employee who builds with AI.
Availability
Cycode Citizen Developer Security is available now in private preview. Learn more at https://cycode.com/citizen-developer-security/.
About Cycode
Cycode is the leader in Agentic Development Security, securing AI coding from prompt to runtime. Cycode is Always-On™, Context-Rich, and Autonomous in a single platform built for the ADLC. Cycode continuously identifies risk across the entire AI development lifecycle, governs the AI tools developers and citizen developers use, and deploys agents that prevent risk at AI speed, while still giving the Enterprise the control they require. We’re proud to protect the top Fortune 500's and be recognized as a Leader by the industry's top analyst firms, including the Gartner® Magic Quadrant™ for Application Security Testing, the Gartner® Magic Quadrant™ for Software Supply Chain Security, and the IDC MarketScape for ASPM. Learn more at cycode.com.
Media contact
Media Contact: Emily Gallagher, PRSENSE, emily@prsense.global
