BeyondTrust Network Security Scanner, powered by Retina (Legacy) vs. Snyk

Retina Network Security Scanner is well suited for any environment and infrastructure that would like to expose security deficiencies across their network as well as visualize vulnerabilities as they pertain to assets in their environment. I cannot think of any scenario that would not be appropriate for this product. Since the product carries over to pretty much all assets in your environment, I don't know off the top of y head what it wouldn't be appropriate for.

Incentivized

1) SAST Code Scan 2) Infra Code Scan 3) Docker Image Scan 4) SAS solution and provides good integration with various SCMS

Incentivized

• Besides the fact that Retina NSS performs the fundamental task of scanning all my network devices, one of the main strengths is the speed at which it scans. Time is money and I know people tent to wear that cliché out a bit, but when you are as small as we are of a team, every minute counts.
• We have utilized other network security scanners over the past 21 years and Retina NSS seems to have the smallest footprint with no evidence of scanning degrading performance of the devices scanned.
• They seem to update their database frequently enough that we notice a correlation of threats to discovery.
• There is a small learning curve, but overall, a seasoned IT professional can quickly get up and running in a few hours and get usable results quickly. This falls back on the speed at which Retina NSS scans. My previous network security scanners would sometimes take hours to complete a full vulnerability scan of between 250 - 400 devices, now it only takes a fraction of that time.

Incentivized

• Integration in CI/CD pipeline.
• Periodic reporting is also an option.
• Clear separation of issues/categories.
• Insightful reasoning for issue and suggested solutions.

• I do not have any obvious cons to report at this time.

Incentivized

• Setting up is complex and when not do no properly provides too many false positives.
• We use another tool in parallel because it does not cover all of our languages especially for older code that is in mixed languages.
• Integrating it with bitbucket was not straight forward.

Incentivized

Developer-Centric Design - Snyk integrates directly into IDEs (like VS Code and IntelliJ), CI/CD pipelines, GitHub/GitLab, and container registries. Clear, Actionable Vulnerability report issues are categorized by severity.


Reports include fix recommendations, pull request suggestions, and links to remediation advice.

Incentivized

Retina Network Security Scanner is the only product we have used in our enterprise. I have used a product in the past called GFI LanGuard Network Security Scanner and while it did perform the functions of vulnerability testing, etc...it just wasn't nearly as refined as Retina NSS. It was slow and was not as lightweight as Retina as far as end-user detection.

Incentivized

Developer-Centric Design


Snyk integrates seamlessly into the dev workflow (IDEs, Git, CI/CD).


Tools like Veracode/Fortify are security team-centric, with less developer engagement.


Unlike WhiteSource or Sonatype, Snyk has a faster learning curve and actionable fixes.

Incentivized

• The product is extremely easy to deploy, extremely positive.
• If you take full advantage of this product as I did, you will maximize your ROI quickly as we did.
• We were able to visualize our vulnerabilities efficiently and effectively and maintain scheduled scans that allowed us to maintain a continuous improvement atmosphere while securing our investments.
• The ability provide reporting allows our IT department to prioritize issues and remediate as required without chasing down low risk issues over high risk issues that need immediate attention.

Incentivized

• The API is extensive enough for many integration options.
• API keys are rotated on a non-preferred time schedule. There's no way to configure this.
• We had a great experience with the support team and success managers while setting up the product and onboarding projects into the tool

Incentivized