Centralised vulnerability visibility and reduction for our products that we develop. The UI also provides good reporting on KPI data to provide to the relevant stakeholders for full risk reduction visibility. The integration is easy to setup with GitHub and out of the box. Review collected by and hosted on G2.com.

One aspect to consider is if you would like all features available of the platform, there could be a high cost involved, however the Snyk platform is worth the investment in the long run. Review collected by and hosted on G2.com.

quickly identifies and categorises the vulnerabilities. As you create the code, it highlights the problems, improving both the security and the quality of the code. The best aspect is that you can begin using it for nothing. Review collected by and hosted on G2.com.

They can raise various resource quotas in the free plan. Additionally, more documentation detailing how Synk functions at the backend when integrated would be more beneficial. Review collected by and hosted on G2.com.

Its good tool to check Vulnerabilities in project and it also shows category wise vulnerability like critical, high, medium and low by which we can decide which to be fix first and important. And it also provides suggestions of versions in which respective Vulnerabilities has fixed. Also provides plugins for almost very IDE and snyk cli also good by running snyk test in cli it will give details of vulnerabilities in project. Review collected by and hosted on G2.com.

In node Js or react it only check yarn.lock file means first we have to install all dependencies then only it will check for all vulnerabilities. Need to work on code quality suggestion part. Review collected by and hosted on G2.com.

Implementing Snyk was extremely straightforward. We were able to complete it ahead of schedule and with minimal assistance from the Snyk Team. The app itself is clear and valuable. It doesn't require my team to review extensive documentation or go through application-specific training to understand its use; we were able to hit the ground running. Review collected by and hosted on G2.com.

The only thing I can think of is that Snyk does not offer a threat detection component to its product. With the ease of implementation and use, it would be great if we could not only use one tool for both purposes, but we were able to use Snyk for threat detection; the ease and simplicity of use, I feel, would make the program far easier to manage. Review collected by and hosted on G2.com.

While you are coding and face errors in your code, sometimes you will not be able to find the error easily, so this software will help to find and solve the error. Review collected by and hosted on G2.com.

When you have many errors and the code is very large, this software does not work properly. It does not find the error all the time, sometimes you have to find the error by yourself. Review collected by and hosted on G2.com.

Quickly Identifies the vulnerabilities and classifies them. It identifies the issues as you write the code, which increases security and code quality. The best part is you can get started using it for free. Review collected by and hosted on G2.com.

In the free plan, they can increase some resource quota. Also, it would be more helpful if they provided more information on documentation regarding how Synk works in the backend when integrated. Review collected by and hosted on G2.com.

It ensures our application security at every stage of our application development. Helps to find and fix vulnerabilities in our code. When you install Snyk in IDE like Visual Studio Code, the vulnerabilities get detected at an earlier stage. With Snyk CLI commands, Snyk scan can also be integrated into the CICD pipeline with basic knowledge of Snyk. Review collected by and hosted on G2.com.

Snyk reported vulnerabilities scan takes more time. It is not free, we have to pay. Review collected by and hosted on G2.com.

I love that its VS Code extension simply sits quietly in my project checking things until I do something silly. Then it lets me know that it found security issues that I need to review ASAP. Review collected by and hosted on G2.com.

The one thing I really didn't care for (or expect) is that it creates a report cache in your project root. It probably speeds things up, but I didn't know about it. I kept deleting the file and adding it to .gitignore until I learned what it was. I am still not sure whether it should be committed to source control or not. Review collected by and hosted on G2.com.

Snyk give you a good coverage for your open source vulnerabilities, license probelm and basic static code analysis. Review collected by and hosted on G2.com.

The integration part can be misleading, for a real detection you need to integrate it into the ci/cd, and the simple detection of requirements files is not working for all use cases. Dashboards and reporting can be improved and better organized. Review collected by and hosted on G2.com.

I like the automatic weekly report generator that keeps me updated with the new vulnerabilities detected in my projects. Review collected by and hosted on G2.com.

The filename is limited to about 255 characters, consuming a lot of time to rename files temporarily. Review collected by and hosted on G2.com.