Generated from real user reviews
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Accurate, Beginner-Friendly SAST Tool with CI/CD Integration"
What do you like about Snyk?
What I appreciate most about Snyk is its "Reachability" feature. This means that if a vulnerable or exploitable library or package is imported in the
Verified User
Enterprise (> 1000 emp.)
4.5/5
"Extensive Vulnerability Detection and Seamless CI/CD Integration"
What do you like about Snyk?
Snyk has an extensive and up-to-date vulnerability database which helps early detection of vulnerabilities in applications. It is very developer frien
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Accurate, Beginner-Friendly SAST Tool with CI/CD Integration"
What do you like about Snyk?
What I appreciate most about Snyk is its "Reachability" feature. This means that if a vulnerable or exploitable library or package is imported in the
Verified User
Enterprise (> 1000 emp.)
4.5/5
"Extensive Vulnerability Detection and Seamless CI/CD Integration"
What do you like about Snyk?
Snyk has an extensive and up-to-date vulnerability database which helps early detection of vulnerabilities in applications. It is very developer frien
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
4.5/5
"Extensive Vulnerability Detection and Seamless CI/CD Integration"
What do you like about Snyk?
Snyk has an extensive and up-to-date vulnerability database which helps early detection of vulnerabilities in applications. It is very developer frien
Verified User
Enterprise (> 1000 emp.)
4.0/5
"Intuitive, Customizable, and Seamless Integration with Snyk"
What do you like about Snyk?
Snyk's product features a highly intuitive GUI, making it straightforward to identify and address vulnerabilities. The platform allows you to organize
See Related User Reviews
Ryan C.
Enterprise (> 1000 emp.)
4.5/5
"Very quick to find security issues with code bases"
What do you like about Snyk?
I think it is so easy to use. I like that it includes solutions to the issues I have, it can quickly scan a codebase and will constantly scan it. We h
Chris G.
Mid-Market (51-1000 emp.)
4.0/5
"Centralised vulnerability management for product security"
What do you like about Snyk?
Centralised vulnerability visibility and reduction for our products that we develop. The UI also provides good reporting on KPI data to provide to the
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
4.0/5
"Intuitive, Customizable, and Seamless Integration with Snyk"
What do you like about Snyk?
Snyk's product features a highly intuitive GUI, making it straightforward to identify and address vulnerabilities. The platform allows you to organize
Lokesh T.
Mid-Market (51-1000 emp.)
5.0/5
"Developer Centric Platform || Snyk"
What do you like about Snyk?
Recently they came with feature called, Deep code AI, using this we can fix the issue for 1st party code in IDE level
See Related User Reviews
Verified User
Mid-Market (51-1000 emp.)
4.0/5
"Accurate, Beginner-Friendly SAST Tool with CI/CD Integration"
What do you dislike about Snyk?
After some months of project being imported, scanned, and tested, snyk starts providing false-positives issues as well.
Verified User
Enterprise (> 1000 emp.)
4.5/5
"Extensive Vulnerability Detection and Seamless CI/CD Integration"
What do you dislike about Snyk?
Sometimes it flags false positives. Scans can take a few minutes for a medium sized repository which can slow down pipeline.
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
4.0/5
"Intuitive, Customizable, and Seamless Integration with Snyk"
What do you dislike about Snyk?
It's DAST product is in a seperate interface and not integrated into the Snyk product itself, I beleive this was due to it being an acquisition. Equal
Verified User
Mid-Market (51-1000 emp.)
5.0/5
"Snyk Review"
What do you dislike about Snyk?
It’s cost. It is very expensive. Other than that, The UI can be a bit better
See Related User Reviews
Ryan C.
Enterprise (> 1000 emp.)
4.5/5
"Very quick to find security issues with code bases"
What do you dislike about Snyk?
The solutions sometimes overlap and don't coincide. Another issue I could say would be pricing.
Chris G.
Mid-Market (51-1000 emp.)
4.0/5
"Centralised vulnerability management for product security"
What do you dislike about Snyk?
One aspect to consider is if you would like all features available of the platform, there could be a high cost involved, however the Snyk platform is
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
4.5/5
"Extensive Vulnerability Detection and Seamless CI/CD Integration"
What do you dislike about Snyk?
Sometimes it flags false positives. Scans can take a few minutes for a medium sized repository which can slow down pipeline.
Verified User
Enterprise (> 1000 emp.)
4.0/5
"Intuitive, Customizable, and Seamless Integration with Snyk"
What do you dislike about Snyk?
It's DAST product is in a seperate interface and not integrated into the Snyk product itself, I beleive this was due to it being an acquisition. Equal
See Related User Reviews
Verified User
Enterprise (> 1000 emp.)
4.5/5
"Extensive Vulnerability Detection and Seamless CI/CD Integration"
What do you dislike about Snyk?
Sometimes it flags false positives. Scans can take a few minutes for a medium sized repository which can slow down pipeline.
Verified User
Enterprise (> 1000 emp.)
4.0/5
"Intuitive, Customizable, and Seamless Integration with Snyk"
What do you dislike about Snyk?
It's DAST product is in a seperate interface and not integrated into the Snyk product itself, I beleive this was due to it being an acquisition. Equal
Snyk allows me to focus on the parts of the software that I can update and make it safer Review collected by and hosted on G2.com.
The limit of scan without authentication Review collected by and hosted on G2.com.
I don't know much about DevOps, but sometimes I forget to update packages when doing many projects. Since Synk opens PR for all of them, I can directly merge to the main branch. Review collected by and hosted on G2.com.
maybe reports can be made available to free users at a certain rate so we can see what kind of thing can happen. Review collected by and hosted on G2.com.
Snyk can integrate with GitHub and constantly scan certain repositories for vulnerabilities and not just when new code is pushed to the repository, allowing the application to be secure even when it is not being worked upon. Excellent UI with great reporting and filtering capabilities, that is easy and intuitive to use. Snyk can automatically create pull requests for fixing fixable vulnerabilities and allowing the code owner to fix issues fast and easily. Review collected by and hosted on G2.com.
Snyk lacks the ability to export the data regarding the vulnerabilities to an external vendor such as Datadog, allowing the customer to graph, alert and process the data. Another great addition to a great tool would be the ability to know when the vulnerability was introduced or the release affecting the vulnerability. Review collected by and hosted on G2.com.
I really like the CLI and the web dashboard. The dashboard helps give an overview of all issues with the option of diving deeper into each one. The CLI is a quick way to test for vulnerabilities in real time while writing code. My favorite feature is the code analysis tool, which helps point out vulnerabilities in my own business logic. I haven't seen any other tool that analyses my logic as well as Snyk. Review collected by and hosted on G2.com.
I have had problems with controlling which projects I want Snyk to analyze. For example, I would like to ignore all Dockerfile vulnerabilities, but I haven't found to way to do that easily. The "Usage" tab in settings is almost what I want, but it only gives file/project-level control, whereas I would want to ignore specific filetypes or repositories. Also, the .dccache file which is generated by VS Code extension is a bit annoying, and it sometimes gets in the way when I just want to quickly analyze some project. Review collected by and hosted on G2.com.
I am a recent devops student. With my experience in CyberSecurity. I have been looking into SAST solutions. Came across Snyk and have not looked back. Excited to learn more about this tool and implement further into my pipeline Review collected by and hosted on G2.com.
So far nothing about the tool I do not dislike. However, I am curious to try out the CLI aspect of the tool itself to see how it can assist. Review collected by and hosted on G2.com.
Helpful in identifying issues with your dependencies and provides upgrade pathways for this so you can keep your application secure. It also scans your code and looks for security issues which also helps Review collected by and hosted on G2.com.
The User Interface of the Application is a little overwhelming with a lot going on. It is also not clear how to dismiss issues found in the scan if they are not issues for your application Review collected by and hosted on G2.com.
For someone who doesn't have the luxury of expenses, Snyk allows me to review all of my public Github projects free of charge on a per commit and a weekly basis with no difficult integrations other than Authorisation from GitHub Review collected by and hosted on G2.com.
I can't always tell if other SAST tools would highlight more or less than Snyk. Granted I primarily use it for Dependency checking vulnerabilities but a single place would be awesome to check Everything SCA and SAST Review collected by and hosted on G2.com.
Dependency and vulnerability scanning with report excellent. Review collected by and hosted on G2.com.
Only support less than 2GB images needed Review collected by and hosted on G2.com.
Seamless integrations with repo and IDE. The initialization in Visual Studio code was ridiculously smooth and did not take manual config. Review collected by and hosted on G2.com.
It leaves behind clutter branches, etc. There is probably an easy way to clean them up other than manual deletion (if they are out of date) but I just don't know it. Review collected by and hosted on G2.com.
We can finally identify security vulnerabilities during the development and fix them before we move forward.
The result is clear and can save you time with proactive feedback and money by saving computational resources used by CI pipelines. Review collected by and hosted on G2.com.
Snyk Portal may require some attention to UX as many have already mentioned.
There are many settings enabled by default that should be asked before starting using the service.
I would suggest some sort of skippable pre-configuration view (like a wizard), so users can have an idea of what features are available/enabled. Review collected by and hosted on G2.com.
