Great vulnerability scanning tool
What do you like best about the product?
-Easy integration available for GIthub
-Vulenrabilities false positive rate is slightly better than other tools
-Can be easily integrated within CI/Cd pipline.
-Automatic code scanning and report generation available
-Works with almost all languages
-Very straightforward to use
-Vulenrabilities false positive rate is slightly better than other tools
-Can be easily integrated within CI/Cd pipline.
-Automatic code scanning and report generation available
-Works with almost all languages
-Very straightforward to use
What do you dislike about the product?
-Sometimes vulenrability reported are false positive and also rarely misses some of the genuine vulnerabilities.
What problems is the product solving and how is that benefiting you?
Snyk is a part of the CI/CD pipleline and performs static code scanning and basic sanity check of the code as a first level of testing. Snyk also provides remedition which is very useful. It has built in support for Github so we leverage snyk to perform regular scans on our codebase.
There are no comments to display