Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Snyk provides the informed and actionable results that others do not
What do you like best about the product?
Beyond the CLI and VS Code integration, seeing the exploit maturity and quick fixes right inline makes speedy work of fixing problems. Additionally, the ability to ignore certain findings and the rich filtering can help adjust the signal-to-noise to zero in on the most urgent problems.
What do you dislike about the product?
Perhaps due to my own ignorance as a newer user, it is disheartening to hit a wall with a vulnerability with "No remediation path available". But I doubt that is a failing of the Snyk tool and system.
What problems is the product solving and how is that benefiting you?
I started with my own personal site, and now progressing to other projects. I'm also introducing Snyk as an offering to my clients, and sincerely hope they adopt it so that we can all sleep better at night.
Recommendations to others considering the product:
The initial trial should be good enough to kick the tires on some low hanging fruit on a project, and get a feel for the experience. Beyond that, try the VS Code integration and CLI tool in a Ci/Cd pipeline to further test out the features and benefits.
- Leave a Comment |
- Mark review as helpful
A Great service for Source code analysis and vulnerability detection
What do you like best about the product?
Snyk offers automatic vulnerability detection for our GitHub repos, also it warns about the vulnerability impact, direct PR to our GitHub repo is another nice feature
What do you dislike about the product?
A few false positives in the code itself which nothing to do with security, most of the time the middleware that is not public and written by us
What problems is the product solving and how is that benefiting you?
Some critical vulnerabilities in our web application, where we are not aware of it, and most of the time we ignore to think about the vulnerability impact
Recommendations to others considering the product:
Snyk is a good service I have used. As a Web Developer, I know how hackers can break into our applications, though I develop websites keeping owasp in mind. Still, I am not sure of the third-party packages like npm. We should appreciate Snyk's work before using an outdated package we can see if that nmp package has any known vulnerabilities and avoid risks at the first stage
Snyk, your best friend to fix the vulnerability
What do you like best about the product?
Easy to use, even a beginner can use it without problem. Fast, the process very fast.
What do you dislike about the product?
some vulnerable cannot be fixed automatically
What problems is the product solving and how is that benefiting you?
some vulnerables related to docker image.
I can fix all critical and high severity issues in minutes
I can fix all critical and high severity issues in minutes
Absolutely seamless experience!
What do you like best about the product?
I could directly import all my repositories from Github version control to check for vulnerabilities using a single click! Also, the vulnerabilities are classified as Low, Medium, High, Critical, etc to help which ones require immediate fixing. The best part is that I can directly create a PR to fix those vulnerabilities and the whole process is so smooth.
What do you dislike about the product?
As of now, I haven't used any other tool as good as Snyk and would recommend trying this out at least once! I couldn't find anything which does not fit my needs.
What problems is the product solving and how is that benefiting you?
I am currently a student and an upcoming software engineer at a big software solutions company. I used Snyk once to test it out and would probably be using more in the future as well.
Scanning & enforcing our Infrastructure permissions & configurations using AWS IAM Role for Fugue
What do you like best about the product?
Fugue offers regulatory health checks in our AWS platform, evaluating our cloud compliance and matching it with our customer standards and organization policies. Ruleset definitions can be made through built-in privileges or custom privileges based on our requirements. It acts as a centralized posture management utility for our cloud platform for resource control access and security compliance.
What do you dislike about the product?
For our enterprise reporting, Fugue facilitates our AWS cloud footprint analytics which is customizable through its dashboard utility. These reports are securely stored in our Amazon S3 buckets and also shared with our clients through Amazon SNS subscription. Overall, I'm satisfied with the solutions offered by Fugue for our cloud resources & SDLC management.
What problems is the product solving and how is that benefiting you?
Before performing our deployments in our client environments, we need to ensure the security standards & configurations across multiple AWS regions. Fugue provides a Unified policy engine that is capable of overviewing our cloud compliance and governance both in the pre-deployment stage and post-deployment stage. Fugue Role needs to be assigned through AWS IAM service, and our IaC scripts are deployed with the help of the AWS CloudFormation stack feature. Prior to the deployment, scanning is done to ensure proper security audits, and rescanning can also be specified after the deployment is complete.
Fugue - stop searching!
What do you like best about the product?
Ease of use, nice user experience and look-and-feel, simple overview and fast SaaS service
What do you dislike about the product?
Nothing really, it was a bit clutterly in the beginning, but there has been a lot of improvements, keep up the good work with your backlog
What problems is the product solving and how is that benefiting you?
Fast and realiable results from the dashboard, easy to fix misconfigs and rules
Snyk: The best security tool for Microservices
What do you like best about the product?
We have been using Snyk for almost a year now for multiple clients and projects. Snyk allows us to scan the code written in various languages, Docker containers, and IaC files. It can be easily integrated with almost all the CI pipelines for inline scans. As per our experience, the scan time is very low as compared to other tools in the market, which helps un in reducing the build time.
What do you dislike about the product?
I didn't find anything to dislike about this tool yet, but it's costly compared to other tools available in the market.
What problems is the product solving and how is that benefiting you?
We are using Snyk for scanning the code and docker images in the CI pipelines. It takes very little time to scan the code, which helps us reduce the overall build time. The reports are accurate with minimum false positives.
Best app to scan for vulnerabilities
What do you like best about the product?
It helps me scan the apps I make, so I don't ship off vulnerable software to my client
What do you dislike about the product?
A bit hard to find people around it (small community)
What problems is the product solving and how is that benefiting you?
I am scanning my web apps for security issues. It saves me the hassle of taking web apps down for maintenance by solving problems before deployment
Solid SaaS for cloud provider security
What do you like best about the product?
The way Fugue displays inter-relationships of resources makes it easier to understand potential impact. It has the feel of a graph database display.
What do you dislike about the product?
I am unable to leverage SAML-based authentication when using Fugue CLI. I want to get away from an API key and key secret to do CLI work.
What problems is the product solving and how is that benefiting you?
We use Fugue to capture security risks based on CIS and GDPR security standards. We generate reports to create a punch list for remediation. It is so easy.
Great Security Compliance Tool
What do you like best about the product?
Everything, starting from the sales to the support and a product that works exactly what was promised
What do you dislike about the product?
It isn't as mature as some similar costly products, but love the fact they are willing to listen and improve.
What problems is the product solving and how is that benefiting you?
To greatly minimize all mis-configurations and ultimately extra work. Also, great reporting verifying our compliance to customers. And the visualizer provides a mapping of all resources.
showing 71 - 80