Endor Labs has been rated by independent research institutions as a leader in the evaluation of security tools developed by Agentic.
As AI programming agents reshape enterprise application security, the company achieved the highest scores in seven evaluation criteria.
Palo Alto, California, USA, November 4, 2026 / PRNewswire / -- Endor Labs, a leader in the field of proxy-based development security, announced today that the company has been recognized as a leader in The Forrester Wave ™: Agentic Development Security Tools Q4 2026. Endor Labs received the highest possible scores across seven criteria, and the company believes this reflects its approach to protecting the rapidly evolving proxy-based development lifecycle ( ADLC ).
As enterprises increasingly rely on AI programming proxies to write, modify, and deploy software, the landscape of application security is undergoing fundamental changes. Programming proxies can now independently select dependencies, execute commands, and modify application code, which introduces security decisions and risks that go beyond the scope of traditional application security testing. This evolution requires new security approaches to govern proxy behavior, assess software generated by proxies, and provide actionable remediation guidance throughout the development process.
Endor Labs CEO and Co-Founder Varun Badhwar stated: "Proxy AI is fundamentally changing the way software is built, and security also needs to evolve at the same rapid pace. We believe that gaining recognition from leaders reflects the importance of protecting the entire proxy-based development lifecycle, from the actions taken by the proxies to the code they generate, which should all be included within the scope of security. As companies grant AI proxies greater autonomy, our focus is on ensuring that security capabilities keep up without slowing down innovation."
Endor Labs indicates that the company has built a platform to meet the growing security needs driven by AI for software development, integrating proxy governance, application security testing, dependency protection, and the repair capabilities driven by AI into developers' existing workflows.
Through integration with Model Context Protocol ( MCP ), skills, the command-line interface ( CLI ), and API, Endor Labs directly brings security into the environment where programming proxies operate. Its capabilities include:
- Proxy Governance: By applying security policies through native hooks to supported programming proxy operations, it helps enterprises control proxy behavior and reduce risks in the development environment.
- AI Driven Application Security: Continuously analyzes application code and dependencies, utilizes deep application context to identify and prioritize the handling of vulnerabilities.
- Software Supply Chain Protection: Evaluate open-source software packages during installation using Endor Labs Package Firewall to help prevent high-risk dependencies from entering the development environment.
- Proxy native security workflow: Integrated with major AI programming proxies such as Claude Code, Codex, Cursor, and Devin, providing security guidance and repair capabilities within the existing development process.
Varun Badhwar stated in subsequent remarks: 'As AI programming agents take on increasingly more responsibilities throughout the software development lifecycle, application security must go beyond merely identifying vulnerabilities in code. Endor Labs is advancing AI security by delving deeper into the context of the code, connecting application code, dependencies, and data flows, to help enterprises better understand, prioritize, and address security risks. As enterprises scale up their use of agent-based development, the ability to integrate this context with consistent security controls and executable guidance within existing development workflows will become increasingly important.'
For more information on the methods of Endor Labs in terms of proxy-based development security, as well as its recognition in The Forrester Wave ™: Agentic Development Security Tools , Q4 2026, please visit: https :// www.endorlabs.com / learn / endor-labs-is-a-leader-in-the-forrester-wave-tm-for-agentic-development-security
About Endor Labs
Endor Labs is a platform designed for the security of proxy-based applications, suitable for teams that are unwilling to compromise between speed and security. Endor Labs helps teams identify, prioritize, and fix vulnerabilities in code, open-source dependencies, and container images. With proxy-based reasoning, deep program analysis, automated repairs, and broad coverage, Endor Labs enables modern engineering and security teams to make progress quickly without any compromises.
Forrester does not endorse any companies, products, brands, or services mentioned in its research publications, nor does it recommend that anyone choose products or services of any company or brand based solely on the ratings contained in such publications. The information is based on the best available resources. The views expressed reflect the judgment at the time and may change over time. This report is part of a broader collection of resources provided by Forrester, which includes interactive models, frameworks, tools, data, and channels for analyst-guided access. For more information, please refer to Forrester regarding our commitments to objectivity.
Media Contact
Sarah Graham
endorlabs @ meetkickstand.com
SOURCE Endor Labs
