quickly identifies and categorises the vulnerabilities. As you create the code, it highlights the problems, improving both the security and the quality of the code. The best aspect is that you can begin using it for nothing. Review collected by and hosted on G2.com.

They can raise various resource quotas in the free plan. Additionally, more documentation detailing how Synk functions at the backend when integrated would be more beneficial. Review collected by and hosted on G2.com.

Its good tool to check Vulnerabilities in project and it also shows category wise vulnerability like critical, high, medium and low by which we can decide which to be fix first and important. And it also provides suggestions of versions in which respective Vulnerabilities has fixed. Also provides plugins for almost very IDE and snyk cli also good by running snyk test in cli it will give details of vulnerabilities in project. Review collected by and hosted on G2.com.

In node Js or react it only check yarn.lock file means first we have to install all dependencies then only it will check for all vulnerabilities. Need to work on code quality suggestion part. Review collected by and hosted on G2.com.

Implementing Snyk was extremely straightforward. We were able to complete it ahead of schedule and with minimal assistance from the Snyk Team. The app itself is clear and valuable. It doesn't require my team to review extensive documentation or go through application-specific training to understand its use; we were able to hit the ground running. Review collected by and hosted on G2.com.

The only thing I can think of is that Snyk does not offer a threat detection component to its product. With the ease of implementation and use, it would be great if we could not only use one tool for both purposes, but we were able to use Snyk for threat detection; the ease and simplicity of use, I feel, would make the program far easier to manage. Review collected by and hosted on G2.com.

While you are do coding and faces the error in your code sometimes you will not be able to find the error easily so this software wil help to find the error and also solve that error. Review collected by and hosted on G2.com.

When you have a many errors and code is very big this software not work properly it not find the error all the time sometimes you have to find error by your self. Review collected by and hosted on G2.com.

Quickly Identifies the vulnerabilities and classifies them. It identifies the issues as you write the code, which increases security and code quality. The best part is you can get started using it for free. Review collected by and hosted on G2.com.

In the free plan, they can increase some resource quota. Also, it would be more helpful if they provided more information on documentation regarding how Synk works in the backend when integrated. Review collected by and hosted on G2.com.

It ensures our application security at every stage of our application development. Helps to find and fix vulnerabilities in our code. When you install snyk in IDE like Visual studio code , the vulnerabilities get detected at earlier stage.

With Snyk CLI commands , snyk scan also be integrated in CICD pipeline with basic knowledge on snyk. Review collected by and hosted on G2.com.

Snyk reported vulnerabilities scna takes more time. It is not free, we have to pay. Review collected by and hosted on G2.com.

I love that its VS Code extension simply sits quietly in my project checking things until I do something silly. Then it lets me know that it found security issues that I need to review ASAP. Review collected by and hosted on G2.com.

The one thing I really didn't care for (or exepect) is that it creates a report cache in your project root. It probably speeds things up, but I didn't know about it. I kept deleting the file and adding it to .gitignore until I learned what it was. I am still not sure whether it should be committed to source control or not. Review collected by and hosted on G2.com.

Snyk give you a good coverage for your open source vulnerabilities, license probelm and basic static code analysis. Review collected by and hosted on G2.com.

The integration part can be misleading, for a real detection you need to integrate it into the ci/cd, and the simple detection of requirements files is not working for all use cases.

Dashboards and reporting can be improved and better organized. Review collected by and hosted on G2.com.

I like the automatic weekly report generator that keeps me updated with the new vulnerabilities detected in my projects. Review collected by and hosted on G2.com.

The filename is limited to about 255 characters, consuming a lot of time to rename files temporarily. Review collected by and hosted on G2.com.

Snyk is very good at finding vulnerabilities in my code (even if it's just that I forgot to update a package to the latest secure version c: )

Snyk works a lot like dependabot, but from my experience, it's much better and much more fleshed out (so to speak). Snyk will give you a detailed analysis of your code and any vulnerabilities found, how to fix them, and even how to exploit them with proofs of concept, etc.

and to think I found out about it from a youtube ad! Review collected by and hosted on G2.com.

nothing at the moment

although I suppose I'd just contact support about the disliked features/bugs in question if I ever found any...

the website overhaul looks really nice, I honestly thought there'd be something I didn't like about it, but it's pretty good :) Review collected by and hosted on G2.com.