Arnica to preview AI code review governance tool at OWASP Global AppSec EU 2026

Arnica will showcase a new product called Arnica Code Review at OWASP Global AppSec EU 2026 in Vienna on June 25-26. The launch targets enterprises wrestling with governance, accountability and compliance gaps as AI-generated code moves faster than traditional security workflows.

Why it matters: - Enterprises are adopting AI coding agents faster than legacy AppSec and development workflows can review the output. - Arnica is positioning governance, accountability and evidence as the missing controls for AI-generated software that is moving toward production. - The company is betting that review-layer governance will matter more than after-the-fact scanning as AI code volume rises.

What happened: - Arnica said it will participate as a Diamond Sponsor and exhibitor at OWASP Global AppSec EU 2026. - The company will preview Arnica Code Review at the Austria Center in Vienna, Austria, on June 25-26. - Media and prospective customers will be able to see the product at booth #D2. - Arnica is also previewing the product alongside the secure-by-default capability it introduced earlier this year.

The details: - Arnica Code Review is designed to govern and secure AI-generated code at the review layer. - The product classifies pull requests before a human reviewer sees them. - The system automatically surfaces security-relevant changes. - Arnica Code Review generates a digitally signed review record for every pull request as compliance evidence. - Arnica describes the product as the first code review solution to combine security analysis and code quality assessment in a single triage decision. - The company says that approach helps teams focus on the most important issues without losing coverage. - Arnica will also demonstrate how enterprises can use governance and workflow intelligence to reduce scanning costs, prioritize remediation and scale AI-assisted development more efficiently. - For more information, Arnica points readers to more information.

Between the lines: - Arnica is framing AI-generated code as a governance problem, not just a detection problem. - The company is arguing that reviewer attention is now a scarce security resource, so triage must happen earlier in the workflow. - Arnica also points to OWASP's Top 10 for Agentic Applications 2026 as evidence that agentic code generation brings distinct risks, including agent goal hijacking, tool misuse and identity abuse. - Arnica's message is that compliance for AI-assisted development will increasingly require human-in-the-loop evidence, not only scanning coverage. - Chief executive Nir Valtman said the industry needs governance, accountability and workflow orchestration, not more alerts. - Valtman also said 90% of software will reach production without a human in the loop in the near future.

What's next: - Arnica will use the Vienna conference to give select media, analysts and prospective enterprise customers an early look at Arnica Code Review. - The company will continue pushing its vision for governing the Agentic Development Lifecycle across AI coding workflows. - Enterprises evaluating AI-assisted development will likely face more pressure to show signed review evidence, not just scan results, as part of their security posture.

The bottom line: - Arnica is moving to make AI code review a governance layer, not just a security checkpoint.