Snyk Runtime Sensor
SnykExternal reviews
144 reviews
from
and
External reviews are not included in the AWS star rating for the product.
Awesome solution of Devs and Engineers
What do you like best about the product?
Vulnerability management.
Vulnerability Analysis
Fix advice.
Easy Integrations
Vulnerability Analysis
Fix advice.
Easy Integrations
What do you dislike about the product?
Reports take a long time to reflect.
Reporting integration with third-party services like powerbi is apain
Reporting integration with third-party services like powerbi is apain
What problems is the product solving and how is that benefiting you?
Vulnerability management.
Snyk has helped us catch bugs and vulnerabilities, while being extremely easy to use
What do you like best about the product?
I really like the CLI and the web dashboard. The dashboard helps give an overview of all issues with the option of diving deeper into each one. The CLI is a quick way to test for vulnerabilities in real time while writing code. My favorite feature is the code analysis tool, which helps point out vulnerabilities in my own business logic. I haven't seen any other tool that analyses my logic as well as Snyk.
What do you dislike about the product?
I have had problems with controlling which projects I want Snyk to analyze. For example, I would like to ignore all Dockerfile vulnerabilities, but I haven't found to way to do that easily. The "Usage" tab in settings is almost what I want, but it only gives file/project-level control, whereas I would want to ignore specific filetypes or repositories. Also, the .dccache file which is generated by VS Code extension is a bit annoying, and it sometimes gets in the way when I just want to quickly analyze some project.
What problems is the product solving and how is that benefiting you?
The main problem Snyk helps us with is writing safer code. The code analysis tool is absolutely incredible, it helps us notice problems in our business logic that we wouldn't have caught ourselves. Snyk also keeps our dependencies up-to-date, so updating major versions is a smaller burden. Keeping packages up-to-date also protects against future vulnerabilities in our dependency tree.
Python requirements.txt limitation for Git integration
What do you like best about the product?
Setup and integration was straightforward. both CLI and Git integration was smooth
What do you dislike about the product?
Snyk has been a pleasure to use. setup and integration was a breeze. For our use case, the only downside was the fact that the Git(gitlab) integration doesn't support python language use of requirements.txt. This meant we had to rewrite our piplelines to use the CLI version. it was a bit of an inconvenience.
What problems is the product solving and how is that benefiting you?
vulnerability checking. it does all the hard work for you
Solid tool for vulnerability scanning
What do you like best about the product?
Easily review the most impactful security issues across all the projects managed through Snyk.
What do you dislike about the product?
Each vulnerability should have a link to the generated PR/MR so it would be easy to review the status of a vulnerability.
What problems is the product solving and how is that benefiting you?
Vulnerability scanning. This helps us with our efforts for SOC Type II compliance.
Snyk Anytime... Any Day !!!
What do you like best about the product?
Snyk is the single source of truth for Vulnerabilities in the composition of your software . The easy to use interface , the depth of information and the reach of scans simply make it Awesome...
What do you dislike about the product?
IT should list out issues under two categories , one which are fixable and the other group for which no fix is available , this will improve the user focus to a much larger extent.
What problems is the product solving and how is that benefiting you?
With Snyk we are providing a level of transparency on the vulnerability profile of software composition , this information is provided with evidence and with all the technical information related to the vulnerability. This improves the decision-making ability of the product owners to prioritize fixes when the resource bucket is limited.
Recommendations to others considering the product:
All i will say is that it is the best in the market today and is a one-stop solution to all your needs around supply chain security and software composition analysis.
Snyk, your best friend to fix the vulnerability
What do you like best about the product?
Easy to use, even a beginner can use it without problem. Fast, the process very fast.
What do you dislike about the product?
some vulnerable cannot be fixed automatically
What problems is the product solving and how is that benefiting you?
some vulnerables related to docker image.
I can fix all critical and high severity issues in minutes
I can fix all critical and high severity issues in minutes
Scanning & enforcing our Infrastructure permissions & configurations using AWS IAM Role for Fugue
What do you like best about the product?
Fugue offers regulatory health checks in our AWS platform, evaluating our cloud compliance and matching it with our customer standards and organization policies. Ruleset definitions can be made through built-in privileges or custom privileges based on our requirements. It acts as a centralized posture management utility for our cloud platform for resource control access and security compliance.
What do you dislike about the product?
For our enterprise reporting, Fugue facilitates our AWS cloud footprint analytics which is customizable through its dashboard utility. These reports are securely stored in our Amazon S3 buckets and also shared with our clients through Amazon SNS subscription. Overall, I'm satisfied with the solutions offered by Fugue for our cloud resources & SDLC management.
What problems is the product solving and how is that benefiting you?
Before performing our deployments in our client environments, we need to ensure the security standards & configurations across multiple AWS regions. Fugue provides a Unified policy engine that is capable of overviewing our cloud compliance and governance both in the pre-deployment stage and post-deployment stage. Fugue Role needs to be assigned through AWS IAM service, and our IaC scripts are deployed with the help of the AWS CloudFormation stack feature. Prior to the deployment, scanning is done to ensure proper security audits, and rescanning can also be specified after the deployment is complete.
Snyk: The best security tool for Microservices
What do you like best about the product?
We have been using Snyk for almost a year now for multiple clients and projects. Snyk allows us to scan the code written in various languages, Docker containers, and IaC files. It can be easily integrated with almost all the CI pipelines for inline scans. As per our experience, the scan time is very low as compared to other tools in the market, which helps un in reducing the build time.
What do you dislike about the product?
I didn't find anything to dislike about this tool yet, but it's costly compared to other tools available in the market.
What problems is the product solving and how is that benefiting you?
We are using Snyk for scanning the code and docker images in the CI pipelines. It takes very little time to scan the code, which helps us reduce the overall build time. The reports are accurate with minimum false positives.
Best app to scan for vulnerabilities
What do you like best about the product?
It helps me scan the apps I make, so I don't ship off vulnerable software to my client
What do you dislike about the product?
A bit hard to find people around it (small community)
What problems is the product solving and how is that benefiting you?
I am scanning my web apps for security issues. It saves me the hassle of taking web apps down for maintenance by solving problems before deployment
Solid SaaS for cloud provider security
What do you like best about the product?
The way Fugue displays inter-relationships of resources makes it easier to understand potential impact. It has the feel of a graph database display.
What do you dislike about the product?
I am unable to leverage SAML-based authentication when using Fugue CLI. I want to get away from an API key and key secret to do CLI work.
What problems is the product solving and how is that benefiting you?
We use Fugue to capture security risks based on CIS and GDPR security standards. We generate reports to create a punch list for remediation. It is so easy.
showing 41 - 50