Having used the product, this reviewer highlights that Flyingduck excels in reducing security noise by up to 90% through its Smart Reachability Analysis and automated fixes. The limitation is its narrow focus on early-stage code security, lacking full-stack coverage.
View Full Review
What sets FlyingDuck apart is its ability to continuously scan for security risks throughout the development lifecycle, rather than just at the end of a project. This ongoing analysis allows our developers to learn over time, helping them understand what to avoid and fostering a culture of security awareness within our team. The well-structured portal presents findings in an organized manner with references to Common Vulnerability Codes, making it easy for developers to act on issues efficiently. Plus, the comprehensive documentation and responsive support team made the integration into our CI/CD pipeline smooth, requiring minimal intervention. We run Flying Duck on a continuous (daily/weekly) basis on all our project repositories. Review collected by and hosted on G2.com.
Nothing really. The product team is very helpful and proactive. Review collected by and hosted on G2.com.
What I like best about Flyingduck is its centralized and easy-to-use platform for running security scans across multiple projects. It helps identify vulnerabilities early in the development lifecycle, making it easier for teams to address security issues before deployment. The clear visibility into scan results and the structured reporting make it practical for both developers and DevOps teams to collaborate on fixing security gaps efficiently. Review collected by and hosted on G2.com.
One aspect where Flyingduck could be enhanced is in the clarity of certain scan findings. Occasionally, the results appear somewhat generic or do not provide enough detailed remediation advice, which can make it challenging for developers to efficiently prioritize and resolve issues. Review collected by and hosted on G2.com.
Flyingduck provides a comprehensive 360° view of SBOM (Software Bill of Materials), security vulnerabilities, and guardrails, including insights at the feature branch level. The ability to identify vulnerabilities before shipping is extremely valuable for maintaining secure releases. Our team relies heavily on Flyingduck’s vulnerability detection and patching capabilities, which streamline our security workflows and reduce risk. Review collected by and hosted on G2.com.
Currently, Flyingduck’s guardrail functionality lacks multi-cloud support, which limits flexibility for organizations operating across different cloud environments. Expanding this capability would make the platform more versatile and aligned with modern multi-cloud strategies. Review collected by and hosted on G2.com.
The dashboard layout, along with the segmentation and navigation of SAST, SCA, and Secret findings within the console, are notable aspects. Review collected by and hosted on G2.com.
Everything has been great, and I have no complaints at all. Review collected by and hosted on G2.com.
Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more.