Cyber Defense Magazine names Xygeni “Most Innovative GenAI Agentic Application Security” and “Transformational Software Supply Chain Security”
MADRID, Spain, October 20, 2026. Xygeni has been named a winner in two categories of the Top InfoSec Innovator Awards 2026 by Cyber Defense Magazine (CDM). The categories are Most Innovative GenAI Agentic Application Security and Transformational Software Supply Chain Security. The winners were announced on October 20 at CDM and in CDM’s Black Unicorn Report for 2026.
These awards follow the two Global InfoSec Awards Xygeni won earlier in 2026, for ASPM and GenAI Application Security. Together they trace a clear progression: from securing AI-generated code to securing the AI agents that now write it.
“Thank you to Cyber Defense Magazine and the judges for this recognition, and above all to our customers, partners and team, who make it possible. AI agents now write and ship code faster than any team can review it, and attackers are publishing malware faster than anyone can sign it. Our customers need protection at both points, without having to rip out the tools they already run. These awards tell us we are building in the right place. For us, security has to work at the speed developers and their AI agents do, or it simply gets bypassed.”
Jesús Cuadrado, CEO, Xygeni
Development now runs at machine speed, and attackers are following it. AI coding agents write code, install dependencies and commit changes with no human reviewing each step. Malicious packages also reach public registries long before any signature or CVE exists to flag them. Both awards recognize the same idea: security has to act where software is created, not after it ships.
Securing the agentic development loop
Through its MCP server, Xygeni lets AI coding agents call its engines while they write code. Agents scan their own output, list new issues, and generate fixes, so AI-generated code passes the same engines and policies as human code. DevAI brings that protection into the developer’s IDE. Xygeni AI Security builds an inventory and AI-BOM of the models, agents, MCP servers, and AI coding tools an organization runs, and classifies risk against the OWASP Top 10 for LLM Applications. It also reviews the skills and instruction files that steer AI agents, catching malicious instructions that no signature can see, and tags findings against the OWASP Top 10 for Agentic Applications.
Stopping supply chain attacks before a signature exists
Malware Early Warning (MEW) scans new package versions as they are published on npm, PyPI, Maven, and other registries. It immediately quarantines suspicious versions, reports confirmed malware to the registry, and notifies affected customers in real time. Xygeni Shield blocks malicious packages on developer workstations before they are downloaded, so install scripts never run. Shield can also enforce a minimum age for new packages, IDE extensions, and plugins, and attributes every block to the process and command that caused it. Build Security adds signed SLSA and in-toto attestations, so teams can prove each artifact was built from the right source by the right pipeline, untampered. MEW is included in Xygeni’s free Developer plan.
The complete list of 2026 Top InfoSec Innovators is available here: Cyber Defense Awards.
About Xygeni
Xygeni is a European application security company headquartered in Spain and certified under ISO 27001. Its platform secures software from the developer’s IDE and AI coding agents to the pipeline and the cloud. It combines native scanners for code, dependencies, secrets, infrastructure as code, and APIs with malware detection that works before a signature exists. Its ASPM gives teams one prioritized view of risk, and its AI triage and remediation also apply to findings from tools teams already use, so nothing has to be ripped out. Xygeni is available as SaaS, on-premises, or air-gapped, with any LLM, including self-hosted models. Customers include Banco Serfinanza, Fintonic and Adaion. Learn more at xygeni.io.
About Cyber Defense Magazine
Cyber Defense Magazine, the industry’s leading information security magazine, has been honoring cybersecurity innovators for over a decade. Each year, top security leaders gather at CyberDefenseCon to celebrate outstanding achievements in InfoSec. Founded by Gary S. Miliefsky, CDM is committed to providing the latest in cybersecurity insights and trends. Learn more at www.cyberdefensemagazine.com.
