No more typing reviews! Try our Samantha, our new voice AI agent.

Diligent One Platform (formerly Highbond) vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Diligent One Platform (form...
Ranking in GRC
22nd
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
3
Ranking in other categories
IT Governance (7th), IT Vendor Risk Management (21st)
Snyk
Ranking in GRC
5th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
51
Ranking in other categories
Application Performance Monitoring (APM) and Observability (21st), Application Security Tools (7th), Static Application Security Testing (SAST) (6th), Cloud Management (13th), Vulnerability Management (20th), Container Security (7th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (18th), DevSecOps (3rd), Application Security Posture Management (ASPM) (2nd), AI Security (11th)
 

Mindshare comparison

As of June 2026, in the GRC category, the mindshare of Diligent One Platform (formerly Highbond) is 1.9%, down from 2.8% compared to the previous year. The mindshare of Snyk is 1.6%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
Snyk1.6%
Diligent One Platform (formerly Highbond)1.9%
Other96.5%
GRC
 

Featured Reviews

WW
Data Analyst at Rhythex
Good automation and analytics, but is costly
The report model was our main concern. I believe currently the solution uses a third party for the reporting. As part of a consulting firm, one of the challenges we face is the difficulty in producing reports that meet the expectations of our clients and customers. It would be beneficial if the focus could be shifted toward improving the reporting aspect. The impact report is a crucial aspect, as we only have one opportunity to create it. Galvanize HighBond can improve by generating more impact reports post-project, and allowing access to the reports using a web version, which would greatly benefit us. The cost of the solution is expensive and needs improvement.
Abhishek-Goyal - PeerSpot reviewer
Software Engineer at a computer software company with 11-50 employees
Improves security posture by actively reducing critical vulnerabilities and guiding remediation
Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"In one year we were able to accomplish what we could not in our 3 year Archer contract, and we did it with half the consulting services and one-third the administrators."
"We have far more visibility into our compliance, risks and controls over the areas we are managing versus accepting risk, and Rsam has also been extremely helpful with the annual audits we receive from our regulators."
"The most valuable feature is automation."
"Snyk is paramount and extremely important for us because anything that goes to production should not have any security vulnerabilities, and every application that goes into production must pass Snyk vulnerability scanning before it can be deployed."
"Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients."
"The customization is excellent."
"Snyk's ability to scan all of those every time we build, and keep a running status of them and recheck them daily, is extremely valuable for making us aware of what's going on."
"The CLI feature is quite useful because it gives us a lot of flexibility in what we want to do. If you use the UI, all the information is there and you can see what Snyk is showing you, but there is nothing else that you can change. However, when you use the CLI, then you can use commands and can get the output or response back from Snyk. You can also take advantage of that output in a different way. For the same reason, we have been using the CLI for the hard gate in the pipeline: Obtain a particular CDSS score for vulnerability. Based on that information, we can then decide if we want to block or allow the build. We have more flexibility if we use the CLI."
"Snyk provides a lot of information on vulnerabilities, the packages being used, and their dependencies, giving good insight into the security of those packages."
"It has a nice dashboard where I can see all the vulnerabilities and risks that they provided. I can also see the category of any risk, such as medium, high, and low. They provide the input priority-wise. The team can target the highest one first, and then they can go to medium and low ones."
"Snyk helps me pinpoint security errors in my code."
 

Cons

"While they don't need as much consulting to get the product implemented, I do wish they had more available."
"The cost of the solution is expensive and needs improvement."
"I would like to give further ability to grouping code repositories, in such a way that you could group them by the teams that own them, then produce alerting to those teams. The way that we are seeing it right now, the alerting only goes to a couple of places. I wish we could configure the code to go to different places."
"Scalability has some issues because we have a lot of code and its use is mandatory."
"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license. Adjusting the policy of the current setup of recording this report is something that can improve. For instance, if you have a certain license, you receive a rating, and the rating of this license remains the same for any use case. No matter if you are using it internally or using it externally, you cannot make the adjustment to your use case. It will always alert as a risky license. The areas of licenses in the reporting and adjustments can be improve"
"Snyk has several limitations, including issues with Gradle, NPM, and Xcode, and trouble with AutoPR."
"We tried to integrate it into our software development environment but it went really badly. It took a lot of time and prevented the developers from using the IDE. Eventually, we didn't use it in the development area... I would like to see better integrations to help the developers get along better with the tool. And the plugin for the IDE is not so good. This is something we would like to have..."
"Because Snyk has so many integrations and so many things it can do, it's hard to really understand all of them and to get that information to each team that needs it... If there were more self-service, perhaps tutorials or overviews for new teams or developers, so that they could click through and see things themselves, that would help."
"It would be helpful if we get a recommendation while doing the scan about the necessary things we need to implement after identifying the vulnerabilities."
"DAST has shortcomings, and Snyk needs to improve and overcome such shortcomings."
 

Pricing and Cost Advice

"I give the cost of the solution a six out of ten."
"Cost-wise, it's similar to Veracode, but I don't know the exact cost."
"Compared to Veracode, Snyk is definitely a cheaper tool."
"You can get a good deal with Snyk for pricing. It's a little expensive, but it is worth it."
"The pricing is reasonable."
"The product has good pricing."
"The price is good. Snyk had a good price compared to the competition, who had higher pricing than them. Also, their licensing and billing are clear."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing a three. It is a cheap solution."
"It is pretty expensive. It is not a cheap product."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
900,644 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
14%
Construction Company
9%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
13%
Manufacturing Company
11%
Computer Software Company
10%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise10
Large Enterprise23
 

Questions from the Community

Ask a question
Earn 20 points
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
What is your primary use case for Snyk?
I use Snyk ( /products/snyk-reviews ) in the DevOps pipeline to identify vulnerabilities before deploying the application. It integrates with Jenkins ( /products/jenkins-reviews ).
 

Also Known As

Rsam GRC, HighBond, HighBond by Galvanize , Diligent GRC Platform
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

CNA Insurance
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about Diligent One Platform (formerly Highbond) vs. Snyk and other solutions. Updated: June 2026.
900,644 professionals have used our research since 2012.