--- title: Snyk Reviews meta_title: 'Snyk Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 135 reviews by the users' company size, role or industry to find out how Snyk works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 135 scale: '5' date_modified: '2026-07-13' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Snyk Reviews **Vendor:** Snyk **Category:** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis) **Average Rating:** 4.5/5.0 **Total Reviews:** 135 ## About Snyk Snyk (pronounced sneak) is a developer security platform for securing custom code, open source dependencies, containers, and cloud infrastructure all from a single platform. Snyk’s developer security solutions enable modern applications to be built securely, empowering developers to own and build security for the whole application, from code & open source to containers & cloud infrastructure. Secure while you code in your IDE: find issues quickly using the scanner, fix issues easily with remediation advice, verify the updated code. Integrate your source code repositories to secure applications: integrate a repository to find issues, prioritize with context, fix & merge. Secure your containers as you build, throughout the SDLC: start fixing containers as soon as your write a Dockerfile, continuously monitor container images throughout their lifecycle, and prioritize with context. Secure build and deployment pipelines: Integrate natively with your CI/CD tool, configure your rules, find & fix issues in your application, and monitor your applications. Secure your apps quickly with Snyk’s vulnerability scanning and automated fixes - Try for Free! ## Snyk Pros & Cons **What users like:** - Users value the **easy integrations** of Snyk, facilitating seamless setup and management within their development workflows. (5 reviews) - Users value Snyk's **vulnerability detection** for its rapid updates and user-friendly integration, enhancing code security and efficiency. (5 reviews) - Users love Snyk for its **ease of use** , enjoying simple integration and intuitive navigation for vulnerability management. (4 reviews) - Users appreciate the **intuitive GUI and seamless integration** of Snyk, making vulnerability management straightforward and efficient. (4 reviews) - Users value Snyk's **efficient vulnerability identification** that enhances code security and streamlines development processes. (4 reviews) - Vulnerability Scanning (4 reviews) - Users value Snyk's **intuitive GUI and customizable features** , which effectively streamline vulnerability management and reporting. (3 reviews) - Remediation Guidance (3 reviews) - Reporting (3 reviews) - Scanning Efficiency (3 reviews) **What users dislike:** - Users find Snyk to be **very expensive** , raising concerns about cost despite its long-term value. (3 reviews) - Users experience **false positive issues** with Snyk, leading to confusion and missed genuine vulnerabilities during scans. (3 reviews) - Users find the **interface design lacking** , especially with DAST being separate and overall usability concerns. (2 reviews) - Users express concerns about **pricing issues** , noting that comprehensive features may come at a high cost. (2 reviews) - Users often face **false positives in scanning** and delays in pipeline due to slow scans for medium repositories. (2 reviews) - Users experience **false positives and slow scans** with Snyk, necessitating additional tools for complete code quality management. (2 reviews) - Users note the **lack of integration** of DAST and poor secret detection, requiring additional tools for code quality. (1 reviews) - Dashboard Issues (1 reviews) - Dashboard Usability (1 reviews) - Delayed Detection (1 reviews) ## Snyk Reviews ### 1. Easy to use **Rating:** 5.0/5.0 stars **Reviewed by:** Huseyin S. | Jr. Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** November 10, 2022 **What do you like best about Snyk?** I don't know much about DevOps, but sometimes I forget to update packages when doing many projects. Since Synk opens PR for all of them, I can directly merge to the main branch. **What do you dislike about Snyk?** maybe reports can be made available to free users at a certain rate so we can see what kind of thing can happen. **What problems is Snyk solving and how is that benefiting you?** I usually try to update NPM packages after pushing the application to git. ### 2. Constant security and shifting left with Snyk **Rating:** 5.0/5.0 stars **Reviewed by:** Avinash U. | DevOps Engineer-I, Enterprise (> 1000 emp.) **Reviewed Date:** May 14, 2022 **What do you like best about Snyk?** Snyk can integrate with GitHub and constantly scan certain repositories for vulnerabilities and not just when new code is pushed to the repository, allowing the application to be secure even when it is not being worked upon. Excellent UI with great reporting and filtering capabilities, that is easy and intuitive to use. Snyk can automatically create pull requests for fixing fixable vulnerabilities and allowing the code owner to fix issues fast and easily. **What do you dislike about Snyk?** Snyk lacks the ability to export the data regarding the vulnerabilities to an external vendor such as Datadog, allowing the customer to graph, alert and process the data. Another great addition to a great tool would be the ability to know when the vulnerability was introduced or the release affecting the vulnerability. **What problems is Snyk solving and how is that benefiting you?** We use the GitHub integration and scan our Docker images during CI to find vulnerabilities before pushing to production. We also receive weekly emails regarding the security posture of our applications. Using Snyk, we are able to catch vulnerabilities and fix them easily with the help of Snyk's integrations. ### 3. Snyk has helped us catch bugs and vulnerabilities, while being extremely easy to use **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** July 27, 2022 **What do you like best about Snyk?** I really like the CLI and the web dashboard. The dashboard helps give an overview of all issues with the option of diving deeper into each one. The CLI is a quick way to test for vulnerabilities in real time while writing code. My favorite feature is the code analysis tool, which helps point out vulnerabilities in my own business logic. I haven't seen any other tool that analyses my logic as well as Snyk. **What do you dislike about Snyk?** I have had problems with controlling which projects I want Snyk to analyze. For example, I would like to ignore all Dockerfile vulnerabilities, but I haven't found to way to do that easily. The "Usage" tab in settings is almost what I want, but it only gives file/project-level control, whereas I would want to ignore specific filetypes or repositories. Also, the .dccache file which is generated by VS Code extension is a bit annoying, and it sometimes gets in the way when I just want to quickly analyze some project. **What problems is Snyk solving and how is that benefiting you?** The main problem Snyk helps us with is writing safer code. The code analysis tool is absolutely incredible, it helps us notice problems in our business logic that we wouldn't have caught ourselves. Snyk also keeps our dependencies up-to-date, so updating major versions is a smaller burden. Keeping packages up-to-date also protects against future vulnerabilities in our dependency tree. ### 4. Great Tool! **Rating:** 5.0/5.0 stars **Reviewed by:** Hunain A. | Co-Founder/CTO - Technology & Marketing, Enterprise (> 1000 emp.) **Reviewed Date:** October 01, 2022 **What do you like best about Snyk?** I am a recent devops student. With my experience in CyberSecurity. I have been looking into SAST solutions. Came across Snyk and have not looked back. Excited to learn more about this tool and implement further into my pipeline **What do you dislike about Snyk?** So far nothing about the tool I do not dislike. However, I am curious to try out the CLI aspect of the tool itself to see how it can assist. **What problems is Snyk solving and how is that benefiting you?** Well SAST specfically. More so implementing into my pipeline. ### 5. Useful tool that could have a better layout **Rating:** 3.5/5.0 stars **Reviewed by:** Alexander O. | Senior Web Developer, Mid-Market (51-1000 emp.) **Reviewed Date:** July 28, 2022 **What do you like best about Snyk?** Helpful in identifying issues with your dependencies and provides upgrade pathways for this so you can keep your application secure. It also scans you code and looks for security issues which also helps **What do you dislike about Snyk?** The User Interface of the Application is a little overwhelming with a lot going on. It is also not clear how to dismiss issues found in the scan if they are not issues for your application **What problems is Snyk solving and how is that benefiting you?** It is helping us create a business case to speed the time to upgrade our dependencies and we can point to issues that have been found. It also helps us find out which part of our applications to focus on first. ### 6. Pet Projects user of Snyk **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** October 13, 2022 **What do you like best about Snyk?** For someone who doesn't have the luxury of expenses, Snyk allows me to review all of my public Github projects free of charge on a per commit and a weekly basis with no difficult integrations other than Authorisation from GitHub **What do you dislike about Snyk?** I can't always tell if other SAST tools would highlight more or less than Snyk. Granted I primarily use it for Dependency checking vulnerabilities but a single place would be awesome to check Everything SCA and SAST **What problems is Snyk solving and how is that benefiting you?** Snyk is helping me ensure that my personal projects are always maintained and up to date with regular reports. This takes the hassle out of me remembering to run a scan periodically. ### 7. Tried on docker images well suited. **Rating:** 4.5/5.0 stars **Reviewed by:** Harish A. | Data Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** January 20, 2023 **What do you like best about Snyk?** Dependency and vulnerability scanning with report excellent. **What do you dislike about Snyk?** Only support less than 2GB images needed **What problems is Snyk solving and how is that benefiting you?** overview about security issues for prod ### 8. Well architected **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** January 12, 2023 **What do you like best about Snyk?** Seamless integrations with repo and IDE. The initialization in Visual Studio code was ridiculously smooth and did not take manual config. **What do you dislike about Snyk?** It leaves behind clutter branches, etc. There is probably an easy way to clean them up other than manual deletion (if they are out of date) but I just don't know it. **What problems is Snyk solving and how is that benefiting you?** Actionable intelligence on package security ### 9. Great and versatile SCA tool for dev and ops. **Rating:** 5.0/5.0 stars **Reviewed by:** Roger F. | Software Developer II, Small-Business (50 or fewer emp.) **Reviewed Date:** July 04, 2022 **What do you like best about Snyk?** We can finally identify security vulnerabilities during the development and fix them before we move forward. The result is clear and can save you time with proactive feedback and money by saving computational resources used by CI pipelines. **What do you dislike about Snyk?** Snyk Portal may require some attention to UX as many have already mentioned. There are many settings enabled by default that should be asked before starting using the service. I would suggest some sort of skippable pre-configuration view (like a wizard), so users can have an idea of what features are available/enabled. **What problems is Snyk solving and how is that benefiting you?** I can shift sec during the development process, which decreases the roundtrip when discovering new vulnerabilities during releases. ### 10. Snyk is a Force Multiplier **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** January 06, 2023 **What do you like best about Snyk?** Snyk enables application security teams to focus on the right stuff while allowing engineers unfettered access to the information they need to resolve issues. **What do you dislike about Snyk?** Some features / products are not fully integrated. **What problems is Snyk solving and how is that benefiting you?** Snyk is being utilized to secure our software development lifecycle through all phases of development ### 11. Snyk Review **Rating:** 4.0/5.0 stars **Reviewed by:** Vijay C. | Vice President Information Technology, Enterprise (> 1000 emp.) **Reviewed Date:** August 12, 2022 **What do you like best about Snyk?** Snyk is a tool worth investing in. We have been using it's open source version/SCA for some time and it rightly keeps the developer-first approach. It's good to see that it has integration with the majority of CI/CD tools. Good luck and keep innovating! **What do you dislike about Snyk?** We have however to validate the scorecard with other sources too and be 100% sure that a vulnerability is claimed as serious as depicted. **What problems is Snyk solving and how is that benefiting you?** We like a unified UI showing vulnerabilities ordered by the scores and the proposals to mitigate them. ### 12. Snyk provides the informed and actionable results that others do not **Rating:** 5.0/5.0 stars **Reviewed by:** David R P. | Cloud Architect, Mid-Market (51-1000 emp.) **Reviewed Date:** March 17, 2022 **What do you like best about Snyk?** Beyond the CLI and VS Code integration, seeing the exploit maturity and quick fixes right inline makes speedy work of fixing problems. Additionally, the ability to ignore certain findings and the rich filtering can help adjust the signal-to-noise to zero in on the most urgent problems. **What do you dislike about Snyk?** Perhaps due to my own ignorance as a newer user, it is disheartening to hit a wall with a vulnerability with "No remediation path available". But I doubt that is a failing of the Snyk tool and system. **Recommendations to others considering Snyk:** The initial trial should be good enough to kick the tires on some low hanging fruit on a project, and get a feel for the experience. Beyond that, try the VS Code integration and CLI tool in a Ci/Cd pipeline to further test out the features and benefits. **What problems is Snyk solving and how is that benefiting you?** I started with my own personal site, and now progressing to other projects. I'm also introducing Snyk as an offering to my clients, and sincerely hope they adopt it so that we can all sleep better at night. ### 13. Excellent Product - made our work easy in identifying vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** santoshkumar n. | Small-Business (50 or fewer emp.) **Reviewed Date:** February 03, 2023 **What do you like best about Snyk?** Identifying vulnerabilities in pipeline with details **What do you dislike about Snyk?** Reporting need to improve and more options need to be provide **What problems is Snyk solving and how is that benefiting you?** Container security - identifying vulnerabilities in images IDENTIFYING vulnerabilities in libraries ### 14. Synk review **Rating:** 5.0/5.0 stars **Reviewed by:** kaja o. | Penetration tester, Small-Business (50 or fewer emp.) **Reviewed Date:** December 07, 2022 **What do you like best about Snyk?** The fact that it scans code base, and suggest remediation for the vulnerability and also in most cases helps you to fix it with just clicks of buttons. **What do you dislike about Snyk?** The main thing I dislike about Synk is the lack of dynamic , real time , interactive scanning feature . **What problems is Snyk solving and how is that benefiting you?** Help mitigate vulnerability that threat actors can expolit. ### 15. Business develop fast and secure **Rating:** 5.0/5.0 stars **Reviewed by:** Aniket M. | Engineer, Computer Software, Small-Business (50 or fewer emp.) **Reviewed Date:** October 11, 2022 **What do you like best about Snyk?** Snyk provides best secure and business related helps I also using some benifit of Snyk and also provides Cloud computing and security, Open source management **What do you dislike about Snyk?** Little bit security issues on docker images **What problems is Snyk solving and how is that benefiting you?** open source snyk is best management www.github.com/aniketmishra0/bootstrap Snyk is continuing and management ### 16. Very smooth experience when it comes to discovering threads which might affect our software **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Civic & Social Organization | Small-Business (50 or fewer emp.) **Reviewed Date:** October 07, 2022 **What do you like best about Snyk?** Receiving regular digests and being able to integrate the solution within Github actions-based workflows is very useful. Moreover, the integration with docker is fantastic. **What do you dislike about Snyk?** There are not much about things I may dislike about the product. One thing maybe would be worth considering: offering templates to be better suited for container images built with `docker compose` **What problems is Snyk solving and how is that benefiting you?** Discovering vulnerabilities hidden in docker images I'm building in development, sandboxes, continuous integration or production. Receiving streamlined information actions which may be required. ### 17. Scanning & enforcing our Infrastructure permissions & configurations using AWS IAM Role for Fugue **Rating:** 4.5/5.0 stars **Reviewed by:** Rithika G. | Cloud Engineer, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** February 26, 2022 **What do you like best about Snyk?** Fugue offers regulatory health checks in our AWS platform, evaluating our cloud compliance and matching it with our customer standards and organization policies. Ruleset definitions can be made through built-in privileges or custom privileges based on our requirements. It acts as a centralized posture management utility for our cloud platform for resource control access and security compliance. **What do you dislike about Snyk?** For our enterprise reporting, Fugue facilitates our AWS cloud footprint analytics which is customizable through its dashboard utility. These reports are securely stored in our Amazon S3 buckets and also shared with our clients through Amazon SNS subscription. Overall, I'm satisfied with the solutions offered by Fugue for our cloud resources & SDLC management. **What problems is Snyk solving and how is that benefiting you?** Before performing our deployments in our client environments, we need to ensure the security standards & configurations across multiple AWS regions. Fugue provides a Unified policy engine that is capable of overviewing our cloud compliance and governance both in the pre-deployment stage and post-deployment stage. Fugue Role needs to be assigned through AWS IAM service, and our IaC scripts are deployed with the help of the AWS CloudFormation stack feature. Prior to the deployment, scanning is done to ensure proper security audits, and rescanning can also be specified after the deployment is complete. ### 18. Must needed tool for software supply chain security **Rating:** 4.5/5.0 stars **Reviewed by:** Nandakumar G. | DevOps Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** December 02, 2022 **What do you like best about Snyk?** Easy to use cli and native integration with "docker scan" command. **What do you dislike about Snyk?** Sometimes synk cannot identify/scan binaries that were copied into the container image **What problems is Snyk solving and how is that benefiting you?** Synk helps us scan the codebase with SAST to find any security issues and does an excellent job of scanning container images for vulnerabilities. ### 19. Snyk - a one stop solution for your security needs **Rating:** 4.5/5.0 stars **Reviewed by:** Ananya B. | Software Developer 3, Enterprise (> 1000 emp.) **Reviewed Date:** August 31, 2022 **What do you like best about Snyk?** He fact that one can easily add the projects connected to a version control system on the fly and run scans for detecting security issues scheduled too! **What do you dislike about Snyk?** Nothing as of now I came across to comment **What problems is Snyk solving and how is that benefiting you?** Snyk quickly helped us assess if our projects ran into log4j security threats ### 20. Best tool for DevSecOps **Rating:** 5.0/5.0 stars **Reviewed by:** Tanmay B. | S, Mid-Market (51-1000 emp.) **Reviewed Date:** March 21, 2022 **What do you like best about Snyk?** Simple and straightforward. Easy to use.Simple way integration clearly mention source and sink and give proper remediation. It is helpful for developer and security engineer **What do you dislike about Snyk?** Need improvement in report creation. Proper executive and technical report needed. Some time getting problem in ci/cd pipelines from Jenkin. Need proper step by step guide **Recommendations to others considering Snyk:** This is the best tool for DevSecOps. Easy to use and iron this out by analysis. We are completely satisfied with services. We love to use and give efficient result . Our client also happy due to Snyk. Now Snyk our family. This is our original feeling for Snyk. **What problems is Snyk solving and how is that benefiting you?** Easy to find accurate bugs from code and dependency. Now it is compatible for containers orchestration cloud. Problem solve like fixed lots of dependency issue and upgrade lots of code after Snyk scan. **Official Response from Mary Alati:** > Thank you for the review Tanmay! We truly value your feedback. If you are looking for step-by-step guidance for getting set up with Snyk you might find these three resources helpful: - Short Snyk Training Courses: https://training.snyk.io/ - Snyk's Getting Started Guide: https://snyk.gitbook.io/get-started/ - Snyk User Office Hour Sessions: https://go.snyk.io/user-office-hour-sessions.html Best, Mary at Snyk ### 21. The best app to be aware of vulnerabilities **Rating:** 5.0/5.0 stars **Reviewed by:** Felipe G. | Webmanager, Small-Business (50 or fewer emp.) **Reviewed Date:** October 25, 2022 **What do you like best about Snyk?** It is very easy to know what vulnerabilities are inside your projects **What do you dislike about Snyk?** The platform interface is a bit cluttered **What problems is Snyk solving and how is that benefiting you?** Keep update and secure my apps ### 22. Top solution for SCA security **Rating:** 4.5/5.0 stars **Reviewed by:** Roy A. | Application Secuirty Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** January 27, 2022 **What do you like best about Snyk?** Clean and modern UX combined with the richest vulnerability DB. Very easy to integrate with Github. Able to test on every platform - IDE, CLI, Web. **What do you dislike about Snyk?** Scaling to enterprises is not ideal and can take many resources and time. Also, the reachability feature is essential for better prioritization, but it's still in an immature place and can't be fully trusted. **What problems is Snyk solving and how is that benefiting you?** Identifying vulnerable dependencies in the code and getting suggestions for library upgrades. ### 23. Automatic security updates? Yes please! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Chemicals | Small-Business (50 or fewer emp.) **Reviewed Date:** August 05, 2022 **What do you like best about Snyk?** Keeping up with security vulnerabilities is impossible without some sort of aggregator. Snyk makes it easy to identify and update your code to keep it secure! **What do you dislike about Snyk?** I'm not thrilled about handing over access to my code and repos to a third party. I can't trust that they will act responsibly. **What problems is Snyk solving and how is that benefiting you?** It helps to keep my web applications up to date and secure! ### 24. How easy is synk **Rating:** 5.0/5.0 stars **Reviewed by:** Rishabh T. | Student Assistant IO Security Operation, Small-Business (50 or fewer emp.) **Reviewed Date:** October 09, 2022 **What do you like best about Snyk?** I have used Synk while checking for security issues on the docker images during hackUTA as well as when I was going through docker tutorial. I was amazed how it's easy to see all the vulnerabilities and resolve it. **What do you dislike about Snyk?** Automatic list or createdocker image with updated versions to avoid manually adding the versions. **What problems is Snyk solving and how is that benefiting you?** For me it's securing my container to avoid future vulnerabilities in production. ### 25. Inconsistent reports, odd UX, incorrect documentation, time-sink for developers **Rating:** 0.0/5.0 stars **Reviewed by:** Andrew . | Software Engineer **Reviewed Date:** April 15, 2022 **What do you like best about Snyk?** Not sure I can think of anything nice to say here. **What do you dislike about Snyk?** The reports are often flat-out incorrect (particularly w/ licensing detections). Between that and the incredible inconsistencies between what the web app and CLI reports (the docs say the CLI should be more accurate/show more, but the opposite is true), and some very annoying/insanely unintuitive UX design choices, I have zero trust in what Snyk reports, and it's a complete pain to work with. And I know I'm not alone in this opinion, as I've tried before to assume that it's just my own experience, yet time and again I'm proven wrong on this point. **What problems is Snyk solving and how is that benefiting you?** To be fair, it has accurately reported on a couple of actual security vulnerabilities which we were able to address. Otherwise, it seems to cause more problems than it solves (and wastes both my own and the company's time and money as a result). **Official Response from Ezra Tanzer:** > Hey Andrew, thank you for taking the time to write this review and share your feedback. We hear you. We believe that reporting accuracy and consistency are critical to our customers’ success. We know there are improvements that can be made to the reporting offering within the Snyk platform. We are investing in this area, most notably with last month’s acquisition of TopCoat Data and the dedicated projects to rebuild the reporting infrastructure and UX. We don’t know the specifics of the challenges you experienced, but we’d love to hear from you directly to ensure that we collect your feedback and incorporate it into upcoming releases. On a positive note, we’re glad that you have been able to identify real security vulnerabilities and resolve them. Enabling this for our customers is one of our primary goals. We’re always looking for opportunities to improve. Thank you for the direct and critical feedback. Also, here are some resources that might help: - Support portal to submit tickets: https://support.snyk.io/hc/en-us - Snyk Training: Take self-paced courses for admins and developers to use Snyk tools: https://training.snyk.io/ - User Documentation: https://docs.snyk.io/ If you are up for it, contact us at support@snyk.io so we can get reporting in a better place. Sincerely, Ezra Tanzer, Product ### 26. Snyk Anytime... Any Day !!! **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** April 06, 2022 **What do you like best about Snyk?** Snyk is the single source of truth for Vulnerabilities in the composition of your software . The easy to use interface , the depth of information and the reach of scans simply make it Awesome... **What do you dislike about Snyk?** IT should list out issues under two categories , one which are fixable and the other group for which no fix is available , this will improve the user focus to a much larger extent. **Recommendations to others considering Snyk:** All i will say is that it is the best in the market today and is a one-stop solution to all your needs around supply chain security and software composition analysis. **What problems is Snyk solving and how is that benefiting you?** With Snyk we are providing a level of transparency on the vulnerability profile of software composition , this information is provided with evidence and with all the technical information related to the vulnerability. This improves the decision-making ability of the product owners to prioritize fixes when the resource bucket is limited. ### 27. Absolutely seamless experience! **Rating:** 5.0/5.0 stars **Reviewed by:** Rishabh R. | Product Intern, Mid-Market (51-1000 emp.) **Reviewed Date:** March 01, 2022 **What do you like best about Snyk?** I could directly import all my repositories from Github version control to check for vulnerabilities using a single click! Also, the vulnerabilities are classified as Low, Medium, High, Critical, etc to help which ones require immediate fixing. The best part is that I can directly create a PR to fix those vulnerabilities and the whole process is so smooth. **What do you dislike about Snyk?** As of now, I haven't used any other tool as good as Snyk and would recommend trying this out at least once! I couldn't find anything which does not fit my needs. **What problems is Snyk solving and how is that benefiting you?** I am currently a student and an upcoming software engineer at a big software solutions company. I used Snyk once to test it out and would probably be using more in the future as well. ### 28. Snyk: The best security tool for Microservices **Rating:** 4.5/5.0 stars **Reviewed by:** Sagar S. | InfoSec Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** February 08, 2022 **What do you like best about Snyk?** We have been using Snyk for almost a year now for multiple clients and projects. Snyk allows us to scan the code written in various languages, Docker containers, and IaC files. It can be easily integrated with almost all the CI pipelines for inline scans. As per our experience, the scan time is very low as compared to other tools in the market, which helps un in reducing the build time. **What do you dislike about Snyk?** I didn't find anything to dislike about this tool yet, but it's costly compared to other tools available in the market. **What problems is Snyk solving and how is that benefiting you?** We are using Snyk for scanning the code and docker images in the CI pipelines. It takes very little time to scan the code, which helps us reduce the overall build time. The reports are accurate with minimum false positives. ### 29. Snyk integrations are top notch and easy to use plus security research being done is amazing. **Rating:** 5.0/5.0 stars **Reviewed by:** Peter D. | Application Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** August 01, 2022 **What do you like best about Snyk?** Timely identification of new vulnerabilities. Many integration options from source repos to IAC and CI/CD. Vulnerability management done well. **What do you dislike about Snyk?** Reporting bit of the solution can be customized better. **What problems is Snyk solving and how is that benefiting you?** Helping developers identify vulnerabilities early in the SDLC. It's helping me perform fixes before code hits production. ### 30. Good experience with Snyk SAST and SCA tools **Rating:** 5.0/5.0 stars **Reviewed by:** Dragos D. | Head of Cybersecurity, Mid-Market (51-1000 emp.) **Reviewed Date:** October 19, 2022 **What do you like best about Snyk?** Newcomer in terms of SAST/SCA tools. Trying to overcome the shortcomings within this area (e.g. reduce number of FP, use of AI , IDE) **What do you dislike about Snyk?** Nothing identified so far. Seems like a good solution for our security in CI/CD. **What problems is Snyk solving and how is that benefiting you?** Security in CI/CD pipeline ### 31. A Great service for Source code analysis and vulnerability detection **Rating:** 3.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** March 02, 2022 **What do you like best about Snyk?** Snyk offers automatic vulnerability detection for our GitHub repos, also it warns about the vulnerability impact, direct PR to our GitHub repo is another nice feature **What do you dislike about Snyk?** A few false positives in the code itself which nothing to do with security, most of the time the middleware that is not public and written by us **Recommendations to others considering Snyk:** Snyk is a good service I have used. As a Web Developer, I know how hackers can break into our applications, though I develop websites keeping owasp in mind. Still, I am not sure of the third-party packages like npm. We should appreciate Snyk's work before using an outdated package we can see if that nmp package has any known vulnerabilities and avoid risks at the first stage **What problems is Snyk solving and how is that benefiting you?** Some critical vulnerabilities in our web application, where we are not aware of it, and most of the time we ignore to think about the vulnerability impact ### 32. Python requirements.txt limitation for Git integration **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** July 27, 2022 **What do you like best about Snyk?** Setup and integration was straightforward. both CLI and Git integration was smooth **What do you dislike about Snyk?** Snyk has been a pleasure to use. setup and integration was a breeze. For our use case, the only downside was the fact that the Git(gitlab) integration doesn't support python language use of requirements.txt. This meant we had to rewrite our piplelines to use the CLI version. it was a bit of an inconvenience. **What problems is Snyk solving and how is that benefiting you?** vulnerability checking. it does all the hard work for you **Official Response from Mary Alati:** > Hi there. Thanks so much for taking the time to leave a review! I wanted to follow up and let you know that Snyk supports Python and multiple package managers, such as pip and Pipenv. For requirements.txt, this use case has long been supported in the GitLab git repository integration, as well as the Snyk CLI which has been able to integrate into GitLab CI. We’re sorry to hear that you had challenges. If you need support or have any questions, don’t hesitate to reach out to our support team. ### 33. Awesome solution of Devs and Engineers **Rating:** 4.5/5.0 stars **Reviewed by:** Davis K. | Application Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** August 01, 2022 **What do you like best about Snyk?** Vulnerability management. Vulnerability Analysis Fix advice. Easy Integrations **What do you dislike about Snyk?** Reports take a long time to reflect. Reporting integration with third-party services like powerbi is apain **What problems is Snyk solving and how is that benefiting you?** Vulnerability management. ### 34. Great way to catch if any libraries we are using have any vulnerabilities in the version **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Real Estate | Small-Business (50 or fewer emp.) **Reviewed Date:** October 18, 2022 **What do you like best about Snyk?** Great way to catch if any libraries we are using have any vulnerabilities in the version **What do you dislike about Snyk?** Nothing so far; it's excellent we use it all the time! **What problems is Snyk solving and how is that benefiting you?** Snyk is helping us keep our code in check and making sure we are not accidentally releasing into production hard coded API keys or vulnerabilities ### 35. Easy to use, complete solution **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** October 01, 2022 **What do you like best about Snyk?** I really like working with Snyk. It is really user friendly and all-in-one security solution for your apps and cloud workloads. **What do you dislike about Snyk?** I wish there was an on-premise solution. In TR, we need it because of some regulatory difficulties. **What problems is Snyk solving and how is that benefiting you?** It is a complete solution, it sends really informative notifications for your repos, container images and vs. I feel safe with Synk. ### 36. It is very easy to integrate with pielines **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Education Management | Mid-Market (51-1000 emp.) **Reviewed Date:** August 05, 2022 **What do you like best about Snyk?** Integration with pipelines and cheap. Snyk works extremely well with the poetry.lock files **What do you dislike about Snyk?** npm integration not working well. it's a bit more complicated with the setup.py workflow we currently have in the libraries. **What problems is Snyk solving and how is that benefiting you?** snyk works great with poetry lock files but is complicated with setup.py files in repositories ### 37. I am in the process of bringing SNYK into our organization in order to secure code **Rating:** 5.0/5.0 stars **Reviewed by:** Sean M. | Lead Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** June 07, 2022 **What do you like best about Snyk?** IDE integration Scanning for vulns and misconfiguration with details and remediation suggestions as well as references. **What do you dislike about Snyk?** Bundle Pricing can be a bit high. More options outside of bundles for pricing would be appreciated. **Recommendations to others considering Snyk:** Take a look at the demo and try the community version. I already have developer friends that are really enjoying the community version. **What problems is Snyk solving and how is that benefiting you?** SNYK is bringing security right to the IDE and containers where DevOps perform their work and helping integrate Sec in DevSecOps. ### 38. Solid tool for vulnerability scanning **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** July 26, 2022 **What do you like best about Snyk?** Easily review the most impactful security issues across all the projects managed through Snyk. **What do you dislike about Snyk?** Each vulnerability should have a link to the generated PR/MR so it would be easy to review the status of a vulnerability. **What problems is Snyk solving and how is that benefiting you?** Vulnerability scanning. This helps us with our efforts for SOC Type II compliance. ### 39. Snyk is good, easy and accurate results. Very helpful to mitigate the Vulnerabilities . **Rating:** 4.5/5.0 stars **Reviewed by:** Ashok Y. | DevOps Engineer(Software engineer), Mid-Market (51-1000 emp.) **Reviewed Date:** August 21, 2022 **What do you like best about Snyk?** Easy to maintain, ui is very interactive no need of doing the longer installation. Developer friendly. **What do you dislike about Snyk?** Nothing as such, i liked the tool because of its simplicity. **What problems is Snyk solving and how is that benefiting you?** Mitigating the errors ### 40. Easy and efficient application vulnerability scanning **Rating:** 5.0/5.0 stars **Reviewed by:** Marko M. | Administrator, Small-Business (50 or fewer emp.) **Reviewed Date:** October 10, 2021 **What do you like best about Snyk?** Detailed report and solutions for reducing possible weak points. **What do you dislike about Snyk?** Lack of Snyk community where developers can communicate. **Recommendations to others considering Snyk:** One of the best free and open source tools available for application, packages, and frameworks analysis. **What problems is Snyk solving and how is that benefiting you?** To identify critical package, and application weaknesses. ### 41. Snyk is a great tool **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** July 26, 2022 **What do you like best about Snyk?** Integrations with Bitbucket and Jira Clean user interface **What do you dislike about Snyk?** Unable to mass delete CLI projects must like imported repos **What problems is Snyk solving and how is that benefiting you?** Software vulnerabilities and potential licensing issues **Official Response from Mary Alati:** > Hi there. Thank you so much for taking the time to leave a review. Regarding the ability to mass delete CLI projects, I wanted to follow up and let you know that bulk delete does support CLI projects: Under Settings/Usage, use the search bar to search for the name that appears under the grouping in the bulk delete UI. Our product team has noted that improvements are needed for the CLI to make it even easier to bulk delete. It is also worth noting that the API has much more powerful capabilities in regards to deleting in bulk. Currently, the API is available on the Snyk Business and Enterprise plans. You can find more information here https://snyk.docs.apiary.io/#reference/projects/individual-project/delete-a-project. ### 42. Fugue - stop searching! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** February 18, 2022 **What do you like best about Snyk?** Ease of use, nice user experience and look-and-feel, simple overview and fast SaaS service **What do you dislike about Snyk?** Nothing really, it was a bit clutterly in the beginning, but there has been a lot of improvements, keep up the good work with your backlog **What problems is Snyk solving and how is that benefiting you?** Fast and realiable results from the dashboard, easy to fix misconfigs and rules ### 43. Snyk, your best friend to fix the vulnerability **Rating:** 4.5/5.0 stars **Reviewed by:** Budi H. | IT Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** March 02, 2022 **What do you like best about Snyk?** Easy to use, even a beginner can use it without problem. Fast, the process very fast. **What do you dislike about Snyk?** some vulnerable cannot be fixed automatically **What problems is Snyk solving and how is that benefiting you?** some vulnerables related to docker image. I can fix all critical and high severity issues in minutes ### 44. Best app to scan for vulnerabilities **Rating:** 4.5/5.0 stars **Reviewed by:** Shreyas P. | Freelance, Small-Business (50 or fewer emp.) **Reviewed Date:** January 19, 2022 **What do you like best about Snyk?** It helps me scan the apps I make, so I don't ship off vulnerable software to my client **What do you dislike about Snyk?** A bit hard to find people around it (small community) **What problems is Snyk solving and how is that benefiting you?** I am scanning my web apps for security issues. It saves me the hassle of taking web apps down for maintenance by solving problems before deployment ### 45. Container Images do need SecOPS **Rating:** 5.0/5.0 stars **Reviewed by:** Aryan B. | Hosting Operations Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** November 10, 2021 **What do you like best about Snyk?** Snyk is invaluable for scanning freshly baked and older images for vulnerabilities. When you think a newly installed app has got you covered: think again. Snyk will find those log time still unpatched vulnerabilities in apps and libraries that your distro won't or hasn't found out yet. **What do you dislike about Snyk?** I can't say that I miss anything in the product right now **Recommendations to others considering Snyk:** Everybody needs to do this **What problems is Snyk solving and how is that benefiting you?** Insights into the health of container images on dockerhub, demo-ing for corporate customers ### 46. Great Security Compliance Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Petra L. | Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** December 07, 2021 **What do you like best about Snyk?** Everything, starting from the sales to the support and a product that works exactly what was promised **What do you dislike about Snyk?** It isn't as mature as some similar costly products, but love the fact they are willing to listen and improve. **What problems is Snyk solving and how is that benefiting you?** To greatly minimize all mis-configurations and ultimately extra work. Also, great reporting verifying our compliance to customers. And the visualizer provides a mapping of all resources. ### 47. Continuous Security & Compliance Made Easy. **Rating:** 5.0/5.0 stars **Reviewed by:** Rajat S. | Managing Director & Founder, Small-Business (50 or fewer emp.) **Reviewed Date:** December 07, 2021 **What do you like best about Snyk?** 1. Fugue is developer-centric. 2. Fugue can provide continuous compliance reports. 3. Fugue's visualization tool allows you to visualize all your cloud resources and where you are have compliance issues. **What do you dislike about Snyk?** There is very little to dislike about Fugue. **What problems is Snyk solving and how is that benefiting you?** The issue we solved with Fugue is the automation of Continuous Compliance and Security in an ever-evolving cloud lanscape. We wanted a tool that could not only analyze our infrastructure on day 1 but also analyze its running state compared to our declared state. ### 48. Solid SaaS for cloud provider security **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Marketing and Advertising | Mid-Market (51-1000 emp.) **Reviewed Date:** December 09, 2021 **What do you like best about Snyk?** The way Fugue displays inter-relationships of resources makes it easier to understand potential impact. It has the feel of a graph database display. **What do you dislike about Snyk?** I am unable to leverage SAML-based authentication when using Fugue CLI. I want to get away from an API key and key secret to do CLI work. **What problems is Snyk solving and how is that benefiting you?** We use Fugue to capture security risks based on CIS and GDPR security standards. We generate reports to create a punch list for remediation. It is so easy. ### 49. Cloud-native security & compliance insights **Rating:** 5.0/5.0 stars **Reviewed by:** Alfonso C. | Director of Platform Engineering, Enterprise (> 1000 emp.) **Reviewed Date:** July 14, 2021 **What do you like best about Snyk?** Fugue intuitively understands security posture and compliance for cloud-native workloads. Not only can you evaluate your cloud environments against industry standards like CIS, you can also create custom compliance rules for the things that matter to your organization. **What do you dislike about Snyk?** Fugue has good pre-built reports, but it can be confusing at first on which report to use when you need to drill down to answer a specific question. **What problems is Snyk solving and how is that benefiting you?** We use Fugue to give us insight into the security posture of our cloud environments. We create tickets for engineers to remediate when a cloud resource gets out of compliance with our custom security rules in Fugue. ### 50. Simplest way to improve application security is using Snyk **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** January 21, 2021 **What do you like best about Snyk?** Easy to set-up and to use, without compromising on custom use-cases with the API and CLI features. Very exceptional coverage in terms of security database, and works with the vast majority of the different programming languages we implement. Great Features already in place and more are coming with Snyk Code (SAST) that was recently announced. **What do you dislike about Snyk?** The way the different projects are grouped and presented in the UI could be improved (especially if you have a lot of them, and are using multiple features, it can get confusing quickly) Documentation: It can be troublesome to find how to use a specific feature, as the documentation is often hard to navigate. **Recommendations to others considering Snyk:** Take the time to properly understand and use the functionality provided by Snyk. Trying to implement it too fast simply for compliance can make you miss out on a lot of very useful features. **What problems is Snyk solving and how is that benefiting you?** Give visibility on licence usage, and helps compliance on those Gave visibility on all the issues that could arise from Open Source Vulnerabilities, and gave us a great way to prioritize and tackle the issues. The Snyk Score displayed by the application is particularly interesting to let users prioritize what issue should be tackled first, as it takes into account Exploit maturity and impact of the vulnerability. ## Snyk Discussions - [What is Snyk scanning?](https://www.g2.com/discussions/what-is-snyk-scanning) - 2 comments, 2 upvotes - [Is Snyk a SaaS?](https://www.g2.com/discussions/is-snyk-a-saas) - 2 comments - [How good is Snyk?](https://www.g2.com/discussions/how-good-is-snyk) - 2 comments - [View Snyk pricing details and edition comparison](https://www.g2.com/products/snyk/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-07-16+20%3A01%3A09+-0500&secure%5Bsession_id%5D=6d32b81a-7803-4f1e-b101-63a03fbbad9c&secure%5Btoken%5D=65fdd59ca121fc2b7b9c56fb64c07d9deb58f4c5b720b3fabae8317638dee37e&format=llm_user) ## Snyk Integrations - [Amazon Elastic Container Registry (ECR)](https://www.g2.com/products/amazon-elastic-container-registry-ecr/reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [Cursor](https://www.g2.com/products/cursor/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [Slack Connector for Jira](https://www.g2.com/products/slack-connector-for-jira/reviews) ## Snyk Features **Administration** - API / Integrations - Extensibility **Administration** - Risk Scoring - Security Auditing - Configuration Management **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Security** - Tampering - Malicious Code - Verification - Security Risks **Functionality - Software Bill of Materials (SBOM)** - Format Support - Annotations - Attestation **Performance - AI AppSec Assistants** - Remediation - Real-time Vulnerability Detection - Accuracy **Analysis** - Reporting and Analytics - Issue Tracking - Static Code Analysis - Code Analysis **Monitoring** - Continuous Image Assurance - Behavior Monitoring - Observability **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Tracking** - Bill of Materials - Audit Trails - Monitoring **Management - Software Bill of Materials (SBOM)** - Monitoring - Dashboards - User Provisioning **Integration - AI AppSec Assistants** - Stack Integration - Workflow Integration - Codebase Contextual Awareness **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Protection** - Dynamic Image Scanning - Runtime Protection - Workload Protection - Network Segmentation **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution ## Top Snyk Alternatives - [Aikido Security](https://www.g2.com/products/aikido-security/reviews) - 4.6/5.0 (202 reviews) - [Mend.io](https://www.g2.com/products/mend-io/reviews) - 4.3/5.0 (109 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews)