Synack Managed Vulnerability Disclosure Program (VDP)

What do you like best about the product?

The onboarding flow is seamless and straightforward. Synack’s software automatically scans our cloud infrastructure to identify what’s in scope, which makes setup much easier. The CSMs are incredibly helpful, responsive, and easy to work with. Synack’s missions also make testing simple by providing clear, checklist-based guidance.

What do you dislike about the product?

So far, I haven’t come across anything I don’t like about Synack.

What problems is the product solving and how is that benefiting you?

We were having trouble with our talent pool because they weren’t consistently up to date on the latest threats. Especially the AI-related issues. Synack's crowdsourced penetration testing model helps us mitigate this issue, and it allows us to address the newest vulnerabilities before attackers can target us.

What do you like best about the product?

Synack gives me a safe and trusted environment to test assets with great controls and a great amount of data analytics to support. As a tester, it's a reliable and comprehensive platform to work on targets. The reporting is great, and I like the assurance that the assets are being tested thoroughly by a real world cohort of testers with lots of different skills and specialities. The platform highlights exactly where testing time is being focussed, which helps us ensure we're getting the coverage we think we are, and if not, we can specify particular areas for researchers to focus on. This means we're confident our assets have actually been tested, not just that we've been told they have been. We can identify trends and see which vulnerability type is occurring the most, which helps us understand where as a business we need to focus on improving our security posture and lets us focus the team's limited resources most effectively. The analytics dashboard that shows vulnerability locations and types is super valuable, and it makes it really easy for us to provide reporting to management to justify the spend and demonstrate the return we're getting. We valued the extra assurance we got from the vetted team of researchers, which is why we moved from HackerOne. The initial setup was really easy, we had a PoC and the sales team really made it simple. I'd rate it a 10 out of 10 to recommend.

What do you dislike about the product?

I honestly don't have anything bad to say about synack at this point.

What problems is the product solving and how is that benefiting you?

Synack gives me a safe, trusted environment to test assets with great controls and data analytics. It assures me assets are thoroughly tested by a vetted cohort of researchers. The analytics dashboard shows vulnerability trends and locations, helping us focus our limited resources and justify spend to management.

What do you like best about the product?

The community and the people is a key element of Synack. As a client the platform is easy to be used with clear interface, excellent performance and great integrations. An expert is always near by to assist in case of need.

What do you dislike about the product?

The people and community of Synack are the best key value items. As a client the platform is with a clear interface and easy to work with. With several external integrations connecting additional tools for Ai triage and validation makes the process easy.

What problems is the product solving and how is that benefiting you?

Synack helps us validate the security of our internet-facing applications and infrastructure by providing access to skilled security researchers who identify vulnerabilities that traditional automated tools often miss. The platform allows us to continuously assess our attack surface, prioritize real security risks, and verify remediation efforts. This has improved our confidence in our security posture while reducing the time required to identify and validate high-impact issues.

What do you like best about the product?

I particularly like the detailed reports that document vulnerabilities that are discovered. These include detailed write-ups and helpful screenshots. The Synack team has been responsive and has proactively offered additional capabilities/features to augment our existing solution. The web UI is intuitive. Not to be overlooked, the solution meets our security requirements.

What do you dislike about the product?

I find the credit system to be a little confusing. We haven't identified good uses for the credits we have.

What problems is the product solving and how is that benefiting you?

I'm confident this solution is providing us a 24x7 perimeter monitoring solution that we did not have before.

What do you like best about the product?

Quick Turn around time and open to changes on the platform

What do you dislike about the product?

Not very many downsides. If there is one is sometimes the scoping happens a bit slow.

What problems is the product solving and how is that benefiting you?

Independent Third-Party Penetration Testing for compliance and also general security due deligence

What do you like best about the product?

They are able to find vulnerabilities that a scanner on its own cannot. Once addressed the vulnerability can be verified closed.

What do you dislike about the product?

The onboarding was a little haphazard but that was only because of personnel changes on their end.

What problems is the product solving and how is that benefiting you?

Finding vulnerabilities (including some zero days) before they are exploited by the real bad guys.

What do you like best about the product?

I really appreciate the Synack team's ability to engage independently, especially in our large federated environment. As the federal point of contact, it's great that they can work directly with organizations like NIH and CDC, finding ways to bring value with minimal guidance from me. I also find Synack's responsiveness impressive, as they always seem to find ways to add value. Setting up Synack was very easy, which is another thing I like about using it.

What do you dislike about the product?

n/a

What problems is the product solving and how is that benefiting you?

I use Synack for finding vulnerabilities across our environments and managing our VDP, which helps our team engage with independence.

What do you like best about the product?

I like Synack's great customer service and how their pentesting platform effectively helps in pentesting our organization's applications. Their analytics are valuable in keeping our organization safe. Additionally, the initial setup was easy.

What do you dislike about the product?

I wish there were more options for downloading vulnerabilities based on application name and not just code names.

What problems is the product solving and how is that benefiting you?

I use Synack for pentesting our organization's applications effectively and their analytics help keep our org safe.

What do you like best about the product?

My experience collaborating with Synack was highly positive. The team demonstrated exceptional support and a strong commitment to assistance throughout our engagement.

What do you dislike about the product?

The primary concern raised by our management was the pricing structure. Additionally, there are areas within the platform that could benefit from further enhancement and optimization.

What problems is the product solving and how is that benefiting you?

They identified critical vulnerabilities within our web interface and provided invaluable support in securing our internet-facing assets.

What do you like best about the product?

Synack prioritizes real attackers with real validation. Our team relies heavily on outsourcing our pentesting to Synack because they help reduce noise. Synack’s findings are human-validated and exploitable, and that combination helps our infosec team prioritize efforts and focus on what matters most.

What do you dislike about the product?

Not natively integrated enough into the rest of your security stack. This solutions asks as a standalone and requires internal resources to maintain.

What problems is the product solving and how is that benefiting you?

Patch verification speeds up the process and provides real-world validation in real time.