Snyk Reviews

Name: Snyk
Brand: Snyk
Rating: 4 (43 reviews)

Vendor: Snyk

4.1 out of 5

43 reviews
100% willing to recommend

476 followers

Post review

What is Snyk?

Snyk is a user-friendly security solution that enables users to safely develop and use open source code. Users can create automatic scans that allow them to keep a close eye on their code and prevent bad actors from exploiting vulnerabilities. This enables users to find and remove vulnerabilities soon after they appear.

Get the Snyk Buyer's Guide and find out what your peers are saying about Snyk, SonarQube, Wiz and more!

Snyk is the #1 ranked solution in top DevSecOps solutions, #2 ranked solution in top Software Development Analytics solutions, #3 ranked solution in top Software Composition Analysis (SCA) solutions, #4 ranked solution in application security solutions, and #7 ranked solution in Container Security Solutions. PeerSpot users give Snyk an average rating of 8.2 out of 10. Based on the analysis of the 43 most recent Snyk reviews, the overall sentiment is positive, with a sentiment score of 7.3. (Among the lowest in the category). Snyk is most commonly compared to SonarQube: Snyk vs SonarQube. Snyk is popular among the large enterprise segment, accounting for 65% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 15% of all views.

Helped 813,418 peers since 2012

Featured reviews

Jayashree Acharyya

Director at PepsiCo

The solution has improved or streamlined our process a lot for securing container images. We wanted to make sure we are deploying the secure Docker images. Snyk allowed us to check whether it is following our standard of docker images or not. We use Azure DevOps as our platform, and Snyk's integration with Azure DevOps was okay. However, Snyk's integration with JFrog Artifactory didn't go well. We use JFrog Artifactory to store the artifacts we download. We wanted to integrate Snyk with JFrog Artifactory to scan the binary artifacts we downloaded, but that broke our JFrog Artifactory for some reason. Instead of using it there, we are calling it directly from the pipeline. Snyk's automation features significantly reduced remediation times a couple of times. Sometimes, our developers scan the code from the environment and find some Java vulnerabilities. We fixed those vulnerabilities in the lower environment itself. The solution does not require any maintenance. The accuracy of Snyk's vulnerability detection is pretty good compared to other tools. I rate the solution's vulnerability detection feature an eight out of ten. I would recommend Snyk to other users because it is easy to implement and integrate with Azure DevOps and GitHub. Overall, I rate the solution a seven out of ten.

Read full review

VinothKumar5

Senior Consultant at Hexaware Technologies Limited

Snyk can be improved on the reporting aspect regarding the traceability of SCA. It also doesn't have storage. For instance, if you are scanning version 'X' and then you're scanning on another version 'X+1', it doesn't store your information. It doesn't compare particular vulnerabilities between 'X' and 'X+1'. Snyk is helpful and quite handy for people on the development team. The solution's reporting and storage could be improved. The next release of Snyk should have more training features for developers. The tool offers software composition analysis, and though it says what needs to be fixed, it's in a reactive space. Since DevSecOps has become a culture nowadays, and the industry is going more towards proactive measures, the developers need to be trained.

Read full review

Eryk Lawyd

Tech Lead DevSecOps at Letsbank

We have seen an improvement this month. My security team told me, "We need to break your pipeline if the tools present critical and high-end security issues on the code, so this code cannot go to a staging or homologation environment." I then made improvements to the tools, which were not cheap. But it's a standard feature and a customer need, so I do this, then we apply. Using Snyk, we get the results and the reports and deploy the applications with high-end critical issues of security such as DoS or Cross-Site scripting, any kind of present, on the Snyk IO solution.

Read full review

Snyk mindshare

Product category:

As of October 2024, the mindshare of Snyk in the Application Security Tools category stands at 7.5%, down from 8.5% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools

Key learnings from peers

Last updated Oct 10, 2024

Valuable Features

Snyk offers key features such as simplicity, extensive integrations, accuracy in vulnerability databases, and effective notification systems. Users appreciate the ease of integration with tools like Slack, GitLab, and CI/CD pipelines. The platform's comprehensive database, accurate vulnerability detection, and automated pull request capabilities enhance developer experience. Container security, open source insights, and clear reporting on vulnerabilities are valued. It is user-friendly, modular, and provides actionable insights for security management.

"The valuable aspect is its security capabilities."
"Snyk's focus on security is a valuable feature. Also Snyk supports multiple programming languages, which has positively affected my security practices. I use only two or three languages, and when I change the language in a file, it detects it in the same suite.I find the AI-powered scanning overall beneficial.Using Snyk's AI-powered scanning, I can detect around ten or twenty errors in my project with about twenty thousand lines of code, so it helps improve my project by identifying a lot of potential vulnerabilities."
"The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities."

Room for Improvement

Snyk needs to expand its support for more languages and frameworks, improve static and dynamic analysis, enhance reporting, and develop better integration with tools like IDEs and CI pipelines. Users want improved API capabilities, faster UI responsiveness, better notification management, and more accurate alerting to reduce false positives. They also suggest feature enhancements like tagging projects, better policy management, and comprehensive visibility into vulnerabilities' lifecycle. Pricing and licensing models need refinement for broader access and usability.

"We had some issues integrating into our pipeline, however, they were resolved."
"I use Snyk alongside Sonar, and Snyk tends to generate a lot of false positives. Improving the overall report quality and reducing false positives would be beneficial.I don't need additional features; just improving the existing ones would be enough."
"The tool should provide more flexibility and guidance to help us fix the top vulnerabilities before we go into production."

ROI

Snyk significantly reduces time in identifying and fixing vulnerabilities, enhancing developer productivity. Its detailed documentation aids in resolving issues quickly, improving security posture. Integrations streamline the workflow, bringing time-to-value rapidly. Many users see substantial returns through prevention of vulnerabilities, compliance assurance, and proactive threat management. Some note difficulty in quantifying cost savings, while a few perceive limited value. Familiarity with the platform is pivotal for maximizing ROI, achieving up to 70% reduction in issues.

Pricing

Snyk's pricing is generally perceived as expensive but offers good value for enterprises. The licensing model is robust and scalable, typically based on the number of contributing developers, making it straightforward yet potentially costly for larger teams. While some users find it more expensive than competitors, others appreciate its comprehensive features. Additional costs, such as single sign-on, may apply, but overall, Snyk provides competitive pricing relative to its market peers and functionality.

"I would rate the pricing of Snyk at two.I'm currently using the free version, which the company offers before buying the full version. So, the price is affordable, especially for an enterprise."
"The product's price is okay."
"Snyk is an expensive solution."

Popular Use Cases

Organizations primarily use Snyk for identifying vulnerabilities and ensuring license compliance in open-source dependencies. Users utilize Snyk to scan code repositories, Docker images, and Kubernetes for security risks. Snyk integrates with platforms like GitHub for continuous monitoring, providing feedback to developers for remediation. Snyk's SaaS platform is employed in CI/CD pipelines, helping manage open-source risks effectively and enhancing the security development lifecycle.

Service and Support

Snyk's customer service and support are generally praised for being responsive and technically proficient. Many report quick resolutions via direct communication channels like Slack. Technical issues are addressed efficiently, and the support team is described as knowledgeable and helpful. Some note room for improvement in response speed, but customers find the support reliable and proactive, often facilitating seamless integration and troubleshooting experiences. They emphasize the value of customer success managers and open communication.

Deployment

Snyk's initial setup is widely regarded as straightforward and user-friendly. Many find the integration process easy and quick within existing repositories and pipelines. Some deployment steps can vary depending on the environment, but most users report that it takes minimal time and resources. Documentation is often cited as clear and helpful, and support is responsive when needed. While there are occasional setup challenges, user satisfaction tends to be high.

Scalability

Snyk's scalability is highly rated by users, with many successfully integrating it across various environments. It efficiently handles numerous code repositories and large user groups without issues, though some minor performance concerns are noted when handling extensive vulnerability requests. Users appreciate its seamless integration with their workflows, and developer adoption is widespread, though more prominent among security teams. Its cloud-based infrastructure supports scalability, and most users experience easy scaling without significant challenges.

Stability

Snyk is reported to be very stable by users, with minimal downtime. While some challenges related to documentation were noted, the stability itself is largely reliable. Users appreciate the responsive customer support and acknowledge minor issues like occasional sluggishness and memory problems, especially in large projects. Those utilizing the on-premises version mention slower updates compared to the SaaS version. Overall, Snyk receives high ratings for stability, with users rating it around eight to nine out of ten.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Snyk Buyer's Guide for additional reliable information.

Review data by company size

By reviewers

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

15%

Computer Software Company

15%

Manufacturing Company

Insurance Company

Retailer

Government

Healthcare Company

Energy/Utilities Company

University

Comms Service Provider

Media Company

Real Estate/Law Firm

Educational Organization

Construction Company

Non Profit

Wholesaler/Distributor

Transportation Company

Legal Firm

Pharma/Biotech Company

Hospitality Company

Recreational Facilities/Services Company

Outsourcing Company

Logistics Company

Performing Arts

Consumer Goods Company

Marketing Services Firm

Aerospace/Defense Firm

Compare Snyk with alternative products

Learn more about Snyk

Benefits of Snyk

Some of the benefits of using Snyk include:

Conserves resources: Snyk easily integrates with other security solutions and uses their security features to ensure that the work that users are doing is completely secure. These integrations allow them to protect themselves without pulling resources from their continued integration or continued delivery workflows. Resources can be conserved for areas of the greatest need.

Highly flexible: Snyk enables users to customize the system’s security automation features to meet their needs. Users can guarantee that the automation performs the functions that are most essential for their current project. Additionally, users are able to maintain platform governance consistency across their system.

Keeps users ahead of emerging threats. Snyk employs a database of threats that help it detect and keep track of potential issues. This database is constantly being updated to reflect the changes that take place in the realm of cybersecurity. It also uses machine learning. Users are prepared to deal with new issues as they arise.

Automatically scans projects for threats. Snyk’s command-line interface enables users to schedule the solution to run automatic scans of their projects. Time and manpower can be conserved for the areas of greatest need without sacrificing security.

Reviews from Real Users

Snyk is a security platform for developers that stands out among its competitors for a number of reasons. Two major ones are its ability to integrate with other security solutions and important insights that it can enable users to discover. Snyk enables users to combine its already existing security features with those of other solutions to create far more robust and flexible layers of security than what it can supply on its own. It gives users the ability to dig into the security issues that they may experience. Users are given a clear view of the root causes of these problems. This equips them to address the problem and prevent similar issues in the future.

Cameron G., a security software engineer at a tech company, writes, “The most valuable features are their GitLab and JIRA integrations.The GitLab integration lets us pull projects in pretty easily, so that it's pretty minimal for developers to get it set up. Using the JIRA integration, it's also pretty easy to get the information that is generated, as a result of that GitLab integration, back to our teams in a non-intrusive way and in a workflow that we are already using. Snyk is something of a bridge that we use; we get our projects into it and then get the information out of it. Those two integrations are crucial for us to be able to do that pretty simply.”

Sean M., the chief information security officer of a technology vendor, writes, "From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."