G2

Yash R.

Software Engineer 2

Enterprise (> 1000 emp.)

10/22/2026

"Seamless GitHub Integration with Powerful SAST and Outdated Package Detection"

4.5/5

What do you like best about Arnica?

SAST scans help me detect a few SQL injection issues that have existed since the product was developed. Glad that there is a tool that can scan for potential security issues for each commit. Also, outdated libraries/packages detection is one feature I like the most. Earlier, we used to do this task manually, now it is automated and seamless. I loved the UI/UX of Arnica, since it is directly integrated into GitHub, it is easy for us to work. Also, the integration part is seamless. I feel the performance is quite slow in the sense that, after every commit, I have to wait for 5-10 minutes to get the results on the dashboard. But given the impact, I cannot complain much about it. (But would prefer the results to show faster) I am not sure about the pricing of the product, since my company pays for it, but given the use cases, I highly recommend integrating this tool. And also believe in the long run, the ROI from this will be huge. Review collected by and hosted on G2.com.

What do you dislike about Arnica?

The performance is a little on the slower side, I have to wait for a few minutes for the results to show on my dashboard. Review collected by and hosted on G2.com.

What problems is Arnica solving and how is that benefiting you?

We use Arnica for real-time scanning (SAST) for new commits as well as solution repo in our company. It saves a lot of time in detecting potential security issues/vulnerabilities. We recently integrated Arnica into our codebase and to our surprise, it detected 150+ vulnerabilities across our repository, which is good if you ask me. All of the SQL injection issues were detected and we were also able to get a few issues related to memory referencing. Review collected by and hosted on G2.com.