Snyk Reviews & Product Details

Recently they came with feature called, Deep code AI, using this we can fix the issue for 1st party cod in IDE level Review collected by and hosted on G2.com.

It doesnt have On-prem, And also we cannot push the SAST results to the Dashboard from CLI Review collected by and hosted on G2.com.

Integrate with most major code repo's. but the integration is not amazing. Review collected by and hosted on G2.com.

Customer support is slow to respond, usually not helpful and ended up escalating to a developer, that's when we lost all contact and did not get a solution to a clear bug that prevents us from using the product.

Another really important note around SBOM, the CLI does not provide all the information that you get from the UI, the solution provided was to use another tool to extract data. not sure why we pay for a product if we need to use outside, 3rd party tools to get the information we need. Review collected by and hosted on G2.com.

Integration with both Bitbucket and Github, policy as a code, Review collected by and hosted on G2.com.

Too much unnecessary false positives, policy overrides, hard and complex to manage and track alerts Review collected by and hosted on G2.com.

I think it is so easy to use. I like that it includes solutions to the issues I have, it can quickly scan a codebase and will constantly scan it. We had no issues including it into our code base. Review collected by and hosted on G2.com.

The solutions sometimes overlap and don't coincide. Another issue I could say would be pricing. Review collected by and hosted on G2.com.

Great integration with version control tools like Github and Bitbucket Review collected by and hosted on G2.com.

Initially when using Snyk it was a bit confusing, but since then they have improved all the UX and features. Review collected by and hosted on G2.com.

-Easy integration available for GIthub

-Vulenrabilities false positive rate is slightly better than other tools

-Can be easily integrated within CI/Cd pipline.

-Automatic code scanning and report generation available

-Works with almost all languages

-Very straightforward to use Review collected by and hosted on G2.com.

-Sometimes vulenrability reported are false positive and also rarely misses some of the genuine vulnerabilities. Review collected by and hosted on G2.com.

Centralised vulnerability visibility and reduction for our products that we develop. The UI also provides good reporting on KPI data to provide to the relevant stakeholders for full risk reduction visibility. The integration is easy to setup with GitHub and out of the box. Review collected by and hosted on G2.com.

One aspect to consider is if you would like all features available of the platform, there could be a high cost involved, however the Snyk platform is worth the investment in the long run. Review collected by and hosted on G2.com.

quickly identifies and categorises the vulnerabilities. As you create the code, it highlights the problems, improving both the security and the quality of the code. The best aspect is that you can begin using it for nothing. Review collected by and hosted on G2.com.

They can raise various resource quotas in the free plan. Additionally, more documentation detailing how Synk functions at the backend when integrated would be more beneficial. Review collected by and hosted on G2.com.

Its good tool to check Vulnerabilities in project and it also shows category wise vulnerability like critical, high, medium and low by which we can decide which to be fix first and important. And it also provides suggestions of versions in which respective Vulnerabilities has fixed. Also provides plugins for almost very IDE and snyk cli also good by running snyk test in cli it will give details of vulnerabilities in project. Review collected by and hosted on G2.com.

In node Js or react it only check yarn.lock file means first we have to install all dependencies then only it will check for all vulnerabilities. Need to work on code quality suggestion part. Review collected by and hosted on G2.com.

Implementing Snyk was extremely straightforward. We were able to complete it ahead of schedule and with minimal assistance from the Snyk Team. The app itself is clear and valuable. It doesn't require my team to review extensive documentation or go through application-specific training to understand its use; we were able to hit the ground running. Review collected by and hosted on G2.com.

The only thing I can think of is that Snyk does not offer a threat detection component to its product. With the ease of implementation and use, it would be great if we could not only use one tool for both purposes, but we were able to use Snyk for threat detection; the ease and simplicity of use, I feel, would make the program far easier to manage. Review collected by and hosted on G2.com.