Snyk and CAST Highlight are products in the vulnerability management and software quality assessment category. Snyk seems to have the upper hand due to its ease of integration and comprehensive vulnerability database.
Features: Snyk focuses on simplicity with self-service functionality and integrations with source controls like GitHub, GitLab, and cloud CI systems. Its accurate vulnerability database supports numerous languages and offers valuable container security features. Snyk's Slack integration facilitates quick responses to vulnerability alerts. CAST Highlight provides automated and fast scanning capabilities, giving an overview of portfolio quality without needing codebase access, which differentiates it from similar tools. It integrates well with Azure DevOps, making it easy to use.
Room for Improvement: Snyk users suggest enhancements in security scanning features such as SAST or DAST, improving language support, and refining notification systems to avoid excessive alerts. Some users experience integration challenges with certain plugins, and report clarity could be improved to reduce false positives. CAST Highlight users mention configuration complexity and high licensing costs as concerns. Suggestions include enhancing dashboards, self-analysis features, and better integration with languages and frameworks.
Ease of Deployment and Customer Service: Snyk offers flexible deployment options in private, public, and on-premises environments but is favored for public cloud ease of use. Customer service is generally responsive with helpful customer success managers, though there is room for improvement in technical support speed and resolution of issues. CAST Highlight effectively supports public and on-premises deployments, with technical support praised for being responsive and knowledgeable in solving user issues efficiently.
Pricing and ROI: Snyk's pricing is seen as affordable by many though some find it expensive but worth the cost due to its comprehensive features and clear licensing. It provides positive ROI by reducing time spent on vulnerability management, enhancing productivity and security. CAST Highlight is considered expensive but essential, reflecting its capabilities in its pricing model. Its quick issue identification and secure overview are appreciated, although perceptions of value vary due to cost considerations.
CAST Highlight is a SaaS software intelligence product for performing rapid application portfolio analysis. It automatically analyzes source code of hundreds of applications in a week for Cloud Readiness, Software Composition Analysis (Open Source risks), Resiliency, and Technical Debt. Objective software insights from automated source code analysis combined with built-in qualitative surveys for business context enable more informed decision-making about application portfolios.
CAST is the software intelligence category leader. CAST technology can see inside custom applications with MRI-like precision, automatically generating intelligence about their inner workings - composition, architecture, transaction flows, cloud readiness, structural flaws, legal and security risks. It’s becoming essential for faster modernization for cloud, raising the speed and efficiency of Software Engineering, better open source risk control, and accurate technical due diligence. CAST operates globally with offices in North America, Europe, India, China. Visit www.castsoftware.com.
Snyk is a user-friendly security solution that enables users to safely develop and use open source code. Users can create automatic scans that allow them to keep a close eye on their code and prevent bad actors from exploiting vulnerabilities. This enables users to find and remove vulnerabilities soon after they appear.
Benefits of Snyk
Some of the benefits of using Snyk include:
Reviews from Real Users
Snyk is a security platform for developers that stands out among its competitors for a number of reasons. Two major ones are its ability to integrate with other security solutions and important insights that it can enable users to discover. Snyk enables users to combine its already existing security features with those of other solutions to create far more robust and flexible layers of security than what it can supply on its own. It gives users the ability to dig into the security issues that they may experience. Users are given a clear view of the root causes of these problems. This equips them to address the problem and prevent similar issues in the future.
Cameron G., a security software engineer at a tech company, writes, “The most valuable features are their GitLab and JIRA integrations.The GitLab integration lets us pull projects in pretty easily, so that it's pretty minimal for developers to get it set up. Using the JIRA integration, it's also pretty easy to get the information that is generated, as a result of that GitLab integration, back to our teams in a non-intrusive way and in a workflow that we are already using. Snyk is something of a bridge that we use; we get our projects into it and then get the information out of it. Those two integrations are crucial for us to be able to do that pretty simply.”
Sean M., the chief information security officer of a technology vendor, writes, "From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."
We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.
