Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Snyk is a Force Multiplier
What do you like best about the product?
Snyk enables application security teams to focus on the right stuff while allowing engineers unfettered access to the information they need to resolve issues.
What do you dislike about the product?
Some features / products are not fully integrated.
What problems is the product solving and how is that benefiting you?
Snyk is being utilized to secure our software development lifecycle through all phases of development
- Leave a Comment |
- Mark review as helpful
Snyk is a very convenient security tool for developers
What do you like best about the product?
It is easy to use on existing projects and offers a generous free tier.
What do you dislike about the product?
Honestly, I haven't found any issues with this tool, it fits my needs perfectly and if I ever encounter an issue, I make sure to bring it up to the Synk team.
What problems is the product solving and how is that benefiting you?
It solves vulnerabilities in my code and software, allowing me to ship more secure software.
Synk review
What do you like best about the product?
The fact that it scans code base, and suggest remediation for the vulnerability and also in most cases helps you to fix it with just clicks of buttons.
What do you dislike about the product?
The main thing I dislike about Synk is the lack of dynamic , real time , interactive scanning feature .
What problems is the product solving and how is that benefiting you?
Help mitigate vulnerability that threat actors can expolit.
Easy to use and configure.
What do you like best about the product?
One of the most helpful things, in my opinion, is that Snyk is very easy to use. Moreover, it has very permissive commercial plans. And no one should forgive all the supported integrations.
What do you dislike about the product?
Some popular languages are not supported, like Kotlin, and it would be interesting to support popular frameworks. For example Snyk allow the static analysis of Ruby but not an specific subset of rules for Ruby on Rails.
What problems is the product solving and how is that benefiting you?
In my organisation, we mostly use Snyk for dependency checking. Looking to obtain an S-SDLC lifecycle Snyk is a must. Now we are also using the Snyk Code functionalities, but again we started to used Snyk for dependency checking.
Must needed tool for software supply chain security
What do you like best about the product?
Easy to use cli and native integration with "docker scan" command.
What do you dislike about the product?
Sometimes synk cannot identify/scan binaries that were copied into the container image
What problems is the product solving and how is that benefiting you?
Synk helps us scan the codebase with SAST to find any security issues and does an excellent job of scanning container images for vulnerabilities.
Helpful tool for recognizing vulnerabilities in supply chain / dependencies
What do you like best about the product?
Fast response time to at least notify of a vulnerability and, when available, version details of a package to resolve it. Also useful in that it creates PRs to fix those vulnerabilities.
What do you dislike about the product?
The static analysis still has some ways to go, for now it can be useful but depending on the language can often show false positives - not something unique to Snyk, it's a common problem for any static analysis tool.
What problems is the product solving and how is that benefiting you?
Mediate vulnerabilities quickly and before they may cause any issues for customers, both external and internal. Saves time in having to review CVE's manually and often times in formulating a fix.
snyk review
What do you like best about the product?
Snyk is very good at finding vulnerabilities in my code (even if it's just that I forgot to update a package to the latest secure version c: )
Snyk works a lot like dependabot, but from my experience, it's much better and much more fleshed out (so to speak). Snyk will give you a detailed analysis of your code and any vulnerabilities found, how to fix them, and even how to exploit them with proofs of concept, etc.
and to think I found out about it from a youtube ad!
Snyk works a lot like dependabot, but from my experience, it's much better and much more fleshed out (so to speak). Snyk will give you a detailed analysis of your code and any vulnerabilities found, how to fix them, and even how to exploit them with proofs of concept, etc.
and to think I found out about it from a youtube ad!
What do you dislike about the product?
nothing at the moment
although I suppose I'd just contact support about the disliked features/bugs in question if I ever found any...
the website overhaul looks really nice, I honestly thought there'd be something I didn't like about it, but it's pretty good :)
although I suppose I'd just contact support about the disliked features/bugs in question if I ever found any...
the website overhaul looks really nice, I honestly thought there'd be something I didn't like about it, but it's pretty good :)
What problems is the product solving and how is that benefiting you?
The only problems it's supposed to: finding vulnerabilities in mine (and others') code, which it does an incredible job of doing.
Does not allow you making mistakes you did not know you make
What do you like best about the product?
It is easy to use and developer friendly. You can easily test a project locally or let snyk monitor the project from the ci. The quality gate makes sure, you do not introduce new mistakes in your merge requests.
What do you dislike about the product?
The need for a Snyk Broker when working with a self hosted Gitlab instance. We recently moved from the Gitlab SaaS service to a self hosted environment. It was partly our mistake for not reading the Snyk documentation well enough, but now we need a broker for it to monitor our projects
What problems is the product solving and how is that benefiting you?
Snyk monitors our projects for security mistakes in the dependencies. Some projects are on a security only maintenance mode, which is a lot easier with Snyk. But it also monitors the main projects and makes it easy to fix security issues
Extremely versatile vulnerability scan
What do you like best about the product?
Snyk provides a highly versatile scan of code to expose common vulnerabilities in code, not only by recognising vulnerable blocks of code but also by following the path of user-submitted variables through the code to ensure proper validation has been performed. Its integration with Github and pricing model are also exceptional.
What do you dislike about the product?
The downside of Snyk is that not enough people are using it and making the internet a better place.
What problems is the product solving and how is that benefiting you?
Code standards and vulnerability scanning.
Easy to use
What do you like best about the product?
I don't know much about DevOps, but sometimes I forget to update packages when doing many projects. Since Synk opens PR for all of them, I can directly merge to the main branch.
What do you dislike about the product?
maybe reports can be made available to free users at a certain rate so we can see what kind of thing can happen.
What problems is the product solving and how is that benefiting you?
I usually try to update NPM packages after pushing the application to git.
showing 21 - 30