What happened
On Nov 4, 2026 Cycode announced Citizen Developer Security (private preview), extending its Agentic Development Security Platform beyond engineers to every employee who builds with AI agents. It inventories citizen developers and unmanaged codebases plus their coding agents, MCP servers and AI tools via the Context Intelligence Graph; adds Workstation Protection (blocks malicious packages at install) and AI Guardrails (keeps secrets out of prompts, file reads and MCP calls); and scans agent-produced code/dependencies/secrets before production.
Why it matters
Shadow-AI developer sprawl means non-engineers now ship code and touch secrets outside the SDLC; this is one of the first products to bring agent governance, guardrails and code scanning to the citizen-developer population rather than just the engineering org.
Applicability
CISOs with business employees using coding agents (not just engineers) should evaluate the private preview to extend agent coding guardrails and code scanning to unmanaged codebases.