G2

Naveen P.

CEO

Mid-Market (51-1000 emp.)

1/4/2026

"Continuous Security Insights with Seamless CI/CD Integration"

5/5

What do you like best about Flyingduck?

What sets FlyingDuck apart is its ability to continuously scan for security risks throughout the development lifecycle, rather than just at the end of a project. This ongoing analysis allows our developers to learn over time, helping them understand what to avoid and fostering a culture of security awareness within our team. The well-structured portal presents findings in an organized manner with references to Common Vulnerability Codes, making it easy for developers to act on issues efficiently. Plus, the comprehensive documentation and responsive support team made the integration into our CI/CD pipeline smooth, requiring minimal intervention. We run Flying Duck on a continuous (daily/weekly) basis on all our project repositories. Review collected by and hosted on G2.com.

What do you dislike about Flyingduck?

Nothing really. The product team is very helpful and proactive. Review collected by and hosted on G2.com.

What problems is Flyingduck solving and how is that benefiting you?

At Divami, security is a core aspect of our digital product engineering services, and FlyingDuck has been instrumental in strengthening our approach. With its Software Bill of Materials (SBOM), Software Composition Analysis (SCA), Static Application Security Testing (SAST), and Secret Analysis features, we now have clear visibility into vulnerabilities in external packages, source code risks, and potential secret exposures. Since implementing FlyingDuck, our security practices have become more proactive and effective. It’s a fantastic addition for any organization looking to embed security into their development workflow seamlessly. Review collected by and hosted on G2.com.