Tricentis, Tabnine and Snyk: the latest vendor and product news

Kevin Thompson, CEO of Tricentis

Your weekly roundup of the most important QA, software testing and software delivery launches for banks and financial services firms, alongside investments, acquisitions and other vendor news.


This week, BrowserStack brings agentic test automation directly into the developer environment, Tricentis strengthens its agentic quality engineering platform through the acquisition of Tabnine and Infosys wins a major multi-country transformation deal with Investec.

Tricentis buys Tabnine

Tricentis has acquired enterprise AI coding platform Tabnine as it looks to give its testing agents a deeper understanding of the software environments in which they operate.

Tabnine’s Enterprise Context Engine is designed to provide AI systems with information about an organisation’s applications, architecture, coding standards and internal development practices.

Tricentis CEO Kevin Thompson said the company plans to add that context layer to its Agentic Quality Engineering Platform, alongside its existing orchestration, governance and agent-collaboration capabilities.

Dror Weiss

“Quality engineering in the enterprise has never been a model problem. It has always been a context problem,” he explained. “When teams deploy specialised quality and testing agents, they need to understand the full context: the downstream dependencies, the architectural standards, the blast radius of a single change.”

Dror Weiss, the CEO of Tabnine, added that “agents need to understand the systems they operate in before they act, not after.”

Thompson added that the acquisition should enable its testing agents to validate software against the real architecture and requirements of complex enterprise systems, rather than relying only on isolated code or generic test-generation models.

For banks, that could be particularly relevant when AI agents are used to test large estates involving legacy applications, cloud services, third-party platforms and tightly integrated payment or core-banking systems.

BrowserStack launches agentic AI tool

BrowserStack has launched Test Companion, an agentic AI tool designed to automate the full software testing cycle from within integrated development environments.

Built for QA teams and automation engineers, the product can generate test cases, write and execute scripts, investigate failures and maintain existing tests without requiring users to leave their development environment.

Nakul Aggarwal
Nakul Aggarwal

“Any AI that only writes tests solves the easy part. Test Companion owns the full cycle, and that’s the shift,” claimed BrowserStack CTO and co-founder Nakul Aggarwal.

He explained the agent understands an organisation’s existing automation frameworks, page objects, helpers and coding conventions. The platform also uses specialised AI capabilities for root-cause analysis, test healing and visual testing.

Shared models, guardrails and traceability controls are intended to help larger organisations standardise how autonomous testing is used across engineering teams.

That governance layer could be particularly important for banks, because regulated firms will still need visibility into what the agents changed, which tests were run and whether critical risks and requirements received sufficient coverage.

Infosys wins multi-country Investec deal

London-based Investec is preparing for a major software testing and quality assurance programme after hiring Infosys to deploy its cloud-native Finacle banking platform across the wealth manager’s operations in South Africa, the UK, Mauritius and the Channel Islands.

The international financial firm plans to migrate from its legacy platforms to the Finacle Digital Banking Solution Suite running on Microsoft Azure.

Lyndon Subroyen

The multi-country transformation will require Investec to move several critical banking operations onto a multi-region SaaS platform without disrupting customers, compromising data integrity or falling short of regulatory requirements, requiring extensive trialling, testing and monitoring throughout the process.

Lyndon Subroyen, global head of digital and technology for Investec Group, explained the work will go well beyond validating whether the new platform functions as expected.

The bank will need to test legacy data migration, reconciliation, customer journeys, APIs, regional configurations, platform performance, cyber controls and operational resilience.

Subroyen added Investec will also need to demonstrate that critical services remain available during the transition and that calculations, balances and customer records remain accurate as operations move between old and new systems.

Pentera makes web app testing push

Security validation firm Pentera has added AI-native web application penetration testing to its autonomous testing platform.

The new capability is designed to explore application behaviour, adapt its testing activity in real time and determine whether identified weaknesses can actually be exploited. It also covers authenticated applications protected by technologies including single sign-on, multifactor authentication and OAuth.

Pentera said the platform can test business logic and access controls, chain several application weaknesses together and provide developers with evidence and remediation guidance.

For financial firms, the ability to test authenticated workflows could be particularly important for online banking, payments and internal financial applications where some of the greatest risks may exist behind the login screen.

Snyk preps AI pentesting rollout

Snyk is preparing to make its Evo Continuous Offensive Security platform generally available as vendors compete to automate more of the penetration-testing process.

CEO Ken MacAskill

The system uses multiple AI models to test modern applications continuously. Frontier models perform assessments, while a separate validation model acts as an independent judge before a vulnerability is reported.

Snyk said the approach is intended to reduce false positives and prioritise exploitable weaknesses instead of generating another large volume of unverified security alerts. The system retains context, plans multi-stage testing activity and records its actions within a governed environment.

For financial institutions, independent validation could become an important control when AI agents perform increasingly autonomous security testing.

Banks need evidence that reported vulnerabilities are genuine, but also assurance that automated offensive testing remains controlled, traceable and restricted to authorised systems.

Akamai launches controls for AI interactions

Akamai has launched Workforce Protector, the renamed and expanded LayerX platform, to help organisations monitor activity taking place between employees, AI agents and browser-based applications.

The platform applies controls to prompts, responses, text entry, copied information, file transfers and browser extensions. It is designed to operate across Chrome, Edge, Firefox and Safari without requiring an organisation to replace its existing browsers.

Akamai said the product can discover unauthorised AI tools, stop sensitive information from being entered into generative AI applications and attribute browser activity to either a person or an AI agent. Events can also be exported to security monitoring and ticketing systems for investigation and audit purposes.

The launch reflects a wider shift in software assurance as firms move from testing the AI model alone towards monitoring the full environment in which AI is used.

For banks, controls at the browser and interaction level could help test whether internal AI policies work in practice. However, the effectiveness of those controls will itself require validation, including testing false positives, false negatives, user impact and whether sensitive data is consistently intercepted before it reaches external AI services.

Cyera buys Oasis Security for $1bn

Data-security provider Cyera has agreed to acquire Oasis Security in a cash-and-stock transaction valued at $1 billion, as demand grows for tools capable of governing AI agents and other non-human identities.

Yotam Segev

Oasis develops technology for managing machine identities, including service accounts, automated software and AI agents. Cyera intends to combine those capabilities with its existing data-security platform.

The companies expect the transaction to close later this year. According to Cyera chief executive Yotam Segev, demand from shared customers was the main catalyst for bringing the two product sets together.

The deal highlights an emerging assurance challenge for banks: autonomous agents need identities, permissions and access to systems, but conventional identity controls were largely designed around people and relatively predictable software accounts.

As financial firms deploy more agents, QA and security teams will increasingly need to test whether those identities have appropriate permissions, whether access controls continue working as agents change tasks and whether every autonomous action can be traced back to an authorised system and accountable owner.


NEXT MONTH

REGISTER TODAY – SIMPLY CLICK HERE


Why not become a QA Financial subscriber?

It’s entirely FREE

* Receive our weekly newsletter every Wednesday * Get priority invitations to our Forum events *

SIGN UP HERE TODAY


READ MORE


QA FINANCIAL PODCASTS

CLICK HERE TO LISTEN TO OUR EXCLUSIVE CONVERSATIONS