Snyk Reviews, Ratings & Features 2026 | Gartner Peer Insights

Gartner defines software supply chain security (SSCS) tools as solutions that reduce business technology risk by protecting against compromise from third-party software. Using threat intelligence, software composition analysis, software bills of materials and third-party governance, SSCS tools identify risk and ensure software integrity from acquisition through delivery, supporting SaaS and hybrid models and improving DevSecOps maturity.

Active

Find the top Software Supply Chain Security with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Software Supply Chain Security

Snyk Open Source

Snyk

IAM LEAD

We were using Snyk to help manage our vulnerabilities and it wasn't that difficult to connect it to our Github environment and CI/CD pipelines. However, the developers did find it challenging to understand some of the remediation it suggested. Also, the cost is way too high for licenses and if you have big estate the cost becomes unaffordable. 

<50M USD

10B - 30B USD

50M - 250M USD

1B - 3B USD

3B - 10B USD

30B + USD

Manager, It Security And Risk Management

Excelente herramienta para el análisis de vulnerabilidades con SCA para el software de terceros muy precisa, aunque también hay que resaltar que para el CLI aún faltan mejoras para que se pueda llevar un control en tiempo real de las vulnerabilidades, así como también, se observa que en la administración de resultados y reportes aún faltan caractericicaas para una gestion de estos resultados de manera eficiente, esto es debido a que no permite modificaciones globales si no por cada resultado.

An excellent and highly accurate vulnerability analysis tool for third-party software using SCA, although it should be noted that the CLI still needs improvements to allow for real-time vulnerability monitoring. Additionally, the results and reports management lacks features for efficient results handling, as it currently only allows for individual modifications per result, not global ones.

Checkmarx

Veracode

Sonatype

Mend.io

Black Duck

Contrast Security

Tenable

JFrog

FOSSA

Semgrep

GitLab

GitHub

Tidelift

SonarSource

GuardRails

Slim.AI

OX Security

Snyk specializes in providing security solutions that enable security teams and developers to work together to reduce application risk and speed software delivery. By integrating application security into developers' workflows, Snyk aims to help organizations secure their applications from code creation to cloud deployment. The end-to-end view of applications gives developers and security the shared perspective to improve security posture, while enhancing developers' productivity, preventing issues early in the development cycle, and allowing for the fastest response when security events like zero days occur.

Snyk is the leader in developer security. We empower the world√¢‚Ç¨‚Ñ¢s developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first approach ensures organizations can secure all of the critical components of their applications from code to cloud, leading to increased developer productivity, revenue growth, customer satisfaction, cost savings and an overall improved security posture. Snyk√¢‚Ç¨‚Ñ¢s Developer Security Platform automatically integrates with a developer√¢‚Ç¨‚Ñ¢s workflow and is purpose-built for security teams to collaborate with their development teams. Snyk is used by 2,500+ customers worldwide today, including industry leaders such as Asurion, Google, Intuit, MongoDB, New Relic, Revolut and Salesforce.

Snyk was named a Leader in the 2023 Gartner Magic Quadrant√¢‚Äû¬¢ for Application Security Testing (AST) and in The Forrester Wave√¢‚Äû¬¢: Software Composition Analysis (SCA) 2023, and has been recognized on the Forbes Cloud 100 2022 along with the 2023 CNBC Disruptor 50. 

For more information, visit https://snyk.io.

Snyk is the leader in developer security. We empower the worldâs developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first approach ensures organizations can secure all of the critical components of their applications from code to cloud, leading to increased developer productivity, revenue growth, customer satisfaction, cost savings and an overall improved security posture. Snykâs Developer Security Platform automatically integrates with a developerâs workflow and is purpose-built for security teams to collaborate with their development teams. Snyk is used by 2,500+ customers worldwide today, including industry leaders such as Asurion, Google, Intuit, MongoDB, New Relic, Revolut and Salesforce.

Snyk was named a Leader in the 2023 Gartner Magic Quadrantâ¢ for Application Security Testing (AST) and in The Forrester Waveâ¢: Software Composition Analysis (SCA) 2023, and has been recognized on the Forbes Cloud 100 2022 along with the 2023 CNBC Disruptor 50. 

For more information, visit https://snyk.io.

Reviews

Ratings Overview

Overall experience with

Favorable Review

Ease of integration into CI/CD contrasts with manual vulnerability management

Critical Review

Strong vulnerability detection offset by high licensing costs for large teams

Likes and dislikes about

likes

dislikes