A first line of safety but you might need more.
Snyk is an integral part of our development process. It is fully integrated into our deployment process to ensure that Snyk scans any new …
Snyk
Snyk
Snyk
Starting at $0
View PricingOverview
What is Snyk?
Snyk’s Developer Security Platform automatically integrates with a developer’s workflow and helps security teams to collaborate with their development teams. It boasts a developer-first approach that ensures organizations can secure all of the critical components of their applications from code...
Read moreRecent Reviews
Reviewer Pros & Cons
View all pros & consPricing
View all pricingFree
$0
Cloud
Team (Snyk Open Source or Snyk Container or Snyk Infrastructure as Code)
$23
Cloud
per month per user
Business (Snyk Open Source or Snyk Container or Snyk Infrastructure as Code)
$42
Cloud
per month per user
Entry-level set up fee?
- No setup fee
For the latest information on pricing, visithttps://snyk.io/plans
Offerings
- Free Trial
- Free/Freemium Version
- Premium Consulting / Integration Services
Product Details
- About
- Competitors
- Tech Details
What is Snyk?
Snyk’s Developer Security Platform automatically integrates with a developer’s workflow and helps security teams to collaborate with their development teams. It boasts a developer-first approach that ensures organizations can secure all of the critical components of their applications from code to cloud, driving developer productivity, revenue growth, customer satisfaction, cost savings and an improved security posture. The vendor states Snyk is used by 1,200 customers worldwide today, including Asurion, Google, Intuit, MongoDB, New Relic, Revolut and Salesforce. Products include:
- Snyk Open Source - Automatically detect vulnerabilities and automate fixes during development with an SCA backed by intelligence
- Snyk Code - Static Application Security Testing (SAST) re-imagined for the developer
- Snyk Container - Container and Kubernetes security designed to help developers find and fix vulnerabilities in cloud native applications
- Snyk Infrastructure as Code - Reduce risk by automating IaC security and compliance in development workflows pre-deployment and detecting drifted and missing resources post-deployment
- Snyk Cloud - Cloud security with a unified policy as code engine so every team can develop, deploy, and operate safely in the cloud
Snyk Video
Snyk's Developer Security Platform
Snyk Technical Details
| Deployment Types | Software as a Service (SaaS), Cloud, or Web-Based |
|---|---|
| Operating Systems | Unspecified |
| Mobile Application | No |
Comparisons
View all alternativesCompare with
Reviews and Ratings
(15)
Reviews
(1-4 of 4)- Popular Filters
Companies can't remove reviews or game the system. Here's why
January 29, 2023
A first line of safety but you might need more.
Snyk is an integral part of our development process. It is fully integrated into our deployment process to ensure that Snyk scans any new code to identify security issues. We trust this tool to support our effort for clean and secure code. It is sometimes verbose but almost always correct on issues it identifies or areas of concern.
- Identify potential security issues.
- Analyse library dependencies.
- Secure code as it is written close to development.
- Setting up is complex and when not do no properly provides too many false positives.
- We use another tool in parallel because it does not cover all of our languages especially for older code that is in mixed languages.
- Integrating it with bitbucket was not straight forward.
- Snyk Code.
- Snyk open source.
- Positive impact with cleaner and more secure code coming out.
- Reduction of defects.
- Reduction of time to fix defects.
I use both as they combine together well.
January 20, 2023
Snyk (sneek)
We use Snyk as a mandatory pre-deployment test that is run on all pipelines before code can be sent to production. Any vulnerabilities identified are raised as tickets in Jira and assigned to the relevant team for remediation with a link to the relevant Synk page for more details on the vulnerability and how it can be fixed.This is then linked to our internal processes on how quickly the vulnerability needs to be remediated based on the CVSS score.
- Reliable
- Up to date
- Easy to use
- Clear guidance
- Its a bit costly
- Mapping CVSS
- integrations with other tools
- Security it hard to quantify but it regularly highlights vulnerabilities that need to be fixed.
- We would not be able to successfully perform CICD without Snyk
Unfortunately, neither cover all of the use cases that we would like so we need to use both but they are both excellent tools as part of our vulnerability management. We find that Snyk helps us better with improving our MTTR of identified vulnerabilities when compared to inspector but that may be more based on how we have implemented both tools.
July 14, 2022
Let no issues Snyk past
Score 9 out of 10
Vetted Review
Verified User
We use Snyk in our continuous integration and continuous delivery to ensure no major issues end up in the production environment and the cms is used in a responsible and secure manner. Using this in a periodic setup gives us automatic insight and prevents big production security issues, especially in the current cloud environments we operate in.
- Integration in CI/CD pipeline.
- Periodic reporting is also an option.
- Clear separation of issues/categories.
- Insightful reasoning for issue and suggested solutions.
- Insight in the quality and security of our code.
- Multiple tiers to suit your need.
- Good integration options.
- Nothing big on our specific projects.
April 13, 2022
Snyk - So now that you know
Snyk is used for Open Source Software Governance. It helps in dependency management and identifying vulnerability in open-source libraries/packages used in the software.
- Helps in dependency management
- SAST - Static Application Security Testing
- Infra Code Scan ( Terraform , Cloud Formation , Docker image scan)
- OSSG
- Customizable Dashboard for analytics is missing
- Snyk has a sleek GUI but customizing the policies leaves room for improvement
- Autoremediation can be improved.
- OPA based Infra scan is missing and is probably covered by a recent acquisition ( Fugue)
- Vulnerability in Open-source
- Identifying the license violation
- Snyk Code for SAST
- Infra Code Scan
- Increased developer experience
- Better productivity due to shift left as Vulnerabilities are caught earlier in the SDLC process
- Improved Vulnerability Management
- Common dashboard for various stages in CI/CD
Better Vulnerability research and GUI and usability