Overview
Product Information on Snyk Open Source
What is Snyk Open Source?
Snyk Open Source Pricing
Snyk Open Source Product Images
Overall experience with Snyk Open Source
“Security Analysts Find Snyk Useful but Note Missing Task Tracking Capabilities”
“Traditional SCA Solution Faces Modern Challenges”
About Company
Company Description
Snyk specializes in providing security solutions that enable security teams and developers to work together to reduce application risk and speed software delivery. By integrating application security into developers' workflows, Snyk aims to help organizations secure their applications from code creation to cloud deployment. The end-to-end view of applications gives developers and security the shared perspective to improve security posture, while enhancing developers' productivity, preventing issues early in the development cycle, and allowing for the fastest response when security events like zero days occur.
Company Details
Do You Manage Peer Insights at Snyk?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Reviewer Insights for: Snyk Open Source
Performance of Snyk Open Source Across Market Features
Snyk Open Source Likes & Dislikes
The integration with BitBucket. Makes it very useful for me as a security analyst to communicate with developers and point issues in a way that developers will also understand
Easy to deploy, results are pretty accurate and customizable for most needs related to vulnerabilities and license checks. Also (I think) that they support the highest number of technologies when compared to other SCA solutions in the market.
Its ease of use and speed to get results for developers. Its very simple yet robust with how granular you can configure your scan their their CLI option.
The fact that it offers no possibility to follow up on tasks within the platform. Additionally, it is not possible to see which projects are archived or disabled and which are still being worked on by devs.
When talking about large scale, they had many issues with the integration to GitHub such as rate limit issues, failing scans, etc. The product is also unaware of the code context without a runtime agent and its reachability checks aren't good enough.
Snyk Open Source does not support scanning binary files such as .jar files. This would allow the option to scan at source code and at finished/compiled artifact to provide validation of scanning results.
Top Snyk Open Source Alternatives
Peer Discussions
Snyk Open Source Reviews and Ratings
- Cybersecurity Analyst<50M USDTransportationReview Source
Security Analysts Find Snyk Useful but Note Missing Task Tracking Capabilities
Snyk has proven quite useful for us to enable code security. Its features and integrations give you the ease of managing code vulnerabilities and mitigation operations. - Senior Cybersecurity Engineer1B-10B USDHealthcare and BiotechReview Source
Snyk Open Source Review
Snyk Open Source provides a more precise compilation of dependencies during the build process than other products I have used in the past. Its integration in the CI Pipeline and IDE offers results at the time of commit or prior to the code being pushed to remote repositories. It provides the developer with the information needed to remediate to give save time on the backend of a release cycle. - LEAD ENGINEER10B+ USDBankingReview Source
A Comprehensive Examination of a Maven-Based Solution Experience
Excellent experience from start to end. We started on the free tier to trial the product on our application, moving from our previous open source maven based solution. Setup was simple, maintenance was almost non-existent and the pre-compiled packages for certifications/etc made the supplier onboarding process much more streamlined. - Director of Product Security1B-10B USDSoftwareReview Source
Traditional SCA Solution Faces Modern Challenges
More of a traditional SCA, has many gaps and cons when compared to the newer SCA solutions in the market. The developer experience is ok, but got heavily degraded over the last few years. - Principal Security Engineer1B-10B USDRetailReview Source
Evaluating Snyk's Thorough Issue Detection and Challenging Reporting
Snyk's SCA detection capabilities are very good, however it feels like they have broadened their product suite too quickly and so lack some depth in their bread and butter product features like SCA and other fundamental elements like reporting and APIs