One of the most helpful things, in my opinion, is that Snyk is very easy to use. Moreover, it has very permissive commercial plans. And no one should forgive all the supported integrations. Review collected by and hosted on G2.com.

Some popular languages are not supported, like Kotlin, and it would be interesting to support popular frameworks. For example Snyk allow the static analysis of Ruby but not an specific subset of rules for Ruby on Rails. Review collected by and hosted on G2.com.

Fast response time to at least notify of a vulnerability and, when available, version details of a package to resolve it. Also useful in that it creates PRs to fix those vulnerabilities. Review collected by and hosted on G2.com.

The static analysis still has some ways to go, for now it can be useful but depending on the language can often show false positives - not something unique to Snyk, it's a common problem for any static analysis tool. Review collected by and hosted on G2.com.

Snyk has always pushed further than npm audit and provides the checks I need to feel comfortable deploying my changes or catching new zero days in a timely manner. Review collected by and hosted on G2.com.

Like any tool where people work on it in a 9-5, Snyk costs money. Npm audit is getting better and is free. That said, NodeJS is the package injection ecosystem, so I don't mind going a bit premium for a sense of safety on my projects. Additionally, the static analysis is pretty nice as well. Review collected by and hosted on G2.com.

I have followed the Snyk team's work since my first year in graduate school; I researched 3rd party packages and their security on open-source GitHub projects. I have always been impressed by the approach they've taken to security. They were not afraid to offer off-beat (yet very much needed) solutions. Snyk has evolved exponentially since then with a variety of features, and offering docker security excites me. I can't wait for them to grow into web3 and the WebAssembly space soon as well. Review collected by and hosted on G2.com.

Snyk is more expensive than the competition, significantly so. However, I'd say the price difference is potentially worth it considering, you may have to hire an Engineer to hack workarounds for other solutions out there. Depends on your risk factor for future work. Review collected by and hosted on G2.com.

It is free for public repositories, and it is easy to create an account and integrate it with your GitHub repositories. It scans your dependencies very quickly and provides accurate and actionable results to fix those vulnerabilities. Even having a way to automatically submit PRs directly to fix the issues found. Review collected by and hosted on G2.com.

Sometimes the error messages are not very clear, like with the IDE plugin, and it is challenging to understand why the project wasn't imported or scanned. But overall it works seamlessly. Review collected by and hosted on G2.com.

I would like it to do the security scanner at the library level, code, to do the pull request, the merge, the automated CI/CD flow control, with everything that entails, container creation, container scanner, notifications to the necessary people, push to the container manager, more notifications. Automate as much as possible regarding passive safety. Review collected by and hosted on G2.com.

There is nothing to dislike, little details like I would like to have a more intuitive way in the interface for more granular control over the projects being watched. For example, if I decide to stop monitoring said project, I don't see a way to do it at a glance. I would like to select it and delete it from the dashboard, or for example, although it is great that you notify me of the possibility of fixing such security problems, I would like you to be more proactive and suggest that you have said fixed branch ready and simply tell me that you fixed this and that. Of course, you should be able to configure it and say, I want to be more on top of this project, just let me know, or tell the system, ok, I trust you, apply all possible security measures as soon as you find a fix. Review collected by and hosted on G2.com.

Snyk provides a highly versatile scan of code to expose common vulnerabilities in code, not only by recognising vulnerable blocks of code but also by following the path of user-submitted variables through the code to ensure proper validation has been performed. Its integration with Github and pricing model are also exceptional. Review collected by and hosted on G2.com.

The downside of Snyk is that not enough people are using it and making the internet a better place. Review collected by and hosted on G2.com.

It is easy to use on existing projects and offers a generous free tier. Review collected by and hosted on G2.com.

Honestly, I haven't found any issues with this tool, it fits my needs perfectly and if I ever encounter an issue, I make sure to bring it up to the Synk team. Review collected by and hosted on G2.com.

Effective at mitigating cybersecurity risk Review collected by and hosted on G2.com.

Could provide more robust SAST capabilities Review collected by and hosted on G2.com.

check security very quickly, really really fast Review collected by and hosted on G2.com.

provider me too error massage, I need quick answer Review collected by and hosted on G2.com.