No more typing reviews! Try our Samantha, our new voice AI agent.

Microsoft Purview Communication Compliance vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 11, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Microsoft Purview Communica...
Ranking in GRC
12th
Average Rating
8.2
Reviews Sentiment
6.6
Number of Reviews
4
Ranking in other categories
Digital Risk Protection (6th), Microsoft Security Suite (32nd)
Snyk
Ranking in GRC
6th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
52
Ranking in other categories
Application Performance Monitoring (APM) and Observability (20th), Application Security Tools (8th), Static Application Security Testing (SAST) (5th), Cloud Management (12th), Vulnerability Management (16th), Container Security (6th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (15th), DevSecOps (3rd), Application Security Posture Management (ASPM) (1st), AI Security (10th)
 

Mindshare comparison

As of August 2026, in the GRC category, the mindshare of Microsoft Purview Communication Compliance is 1.1%, down from 1.6% compared to the previous year. The mindshare of Snyk is 1.5%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
Snyk1.5%
Microsoft Purview Communication Compliance1.1%
Other97.4%
GRC
 

Featured Reviews

reviewer2840445 - PeerSpot reviewer
Data Engineering Senior Specialist at a tech vendor with 10,001+ employees
Data lineage and quality checks have streamlined team-wide collaboration and business context
The biggest friction point or frustration I have encountered with Microsoft Purview Communication Compliance is cost-wise it is acceptable, but sometimes unexpected errors will occur, though this happens very rarely. There are features I wish Microsoft Purview Communication Compliance had that it does not provide today. Enterprise-level lineage is one such feature. As of now, if Microsoft were to provide this tool for free when you buy Microsoft Fabric, I feel that would be better. This would also result in lower license costs. I do not have any changes I would make to Microsoft Purview Communication Compliance at this time.
Abhishek-Goyal - PeerSpot reviewer
Software Engineer at a computer software company with 11-50 employees
Improves security posture by actively reducing critical vulnerabilities and guiding remediation
Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The time it saves is very useful."
"Customer support is excellent."
"Microsoft Purview Communication Compliance helps with extra collaboration and ensures communication is within the framework."
"Microsoft Purview Communication Compliance has impacted my organization positively; it is a good tool that provides an end-to-end business view for a particular organization."
"The features I appreciate the most in Microsoft Purview Communication Compliance include the ability to build cases, give them dates, and find them based on the notes that I left behind."
"It is one of the best product out there to help developers find and fix vulnerabilities quickly. When we talk about the third-party software vulnerability piece and potentially security issues, it takes the load off the user or developer. They even provide automitigation strategies and an auto-fix feature, which seem to have been adopted pretty well."
"We're loving some of the Kubernetes integration as well. That's really quite cool. It's still in the early days of our use of it, but it looks really exciting. In the Kubernetes world, it's very good at reporting on the areas around the configuration of your platform, rather than the things that you've pulled in. There's some good advice there that allows you to prioritize whether something is important or just worrying. That's very helpful."
"Snyk has given us really good results because it is fully automated. We don't have to scan projects every time to find vulnerabilities, as it already stores the dependencies that we are using. It monitors 24/7 to find out if there are any issues that have been reported out on the Internet."
"I am impressed with the product's security vulnerability detection. My peers in security are praising the tool for its accuracy to detect security vulnerabilities. The product is very easy to onboard. It doesn't require a lot of preparation or prerequisites. It's a bit of a plug-and-play as long as you're using a package manager or for example, you are using a GitHub repository. And that is an advantage for this tool because developers don't want to add more tools to what they're currently using."
"The CLI feature is quite useful because it gives us a lot of flexibility in what we want to do. If you use the UI, all the information is there and you can see what Snyk is showing you, but there is nothing else that you can change. However, when you use the CLI, then you can use commands and can get the output or response back from Snyk. You can also take advantage of that output in a different way. For the same reason, we have been using the CLI for the hard gate in the pipeline: Obtain a particular CDSS score for vulnerability. Based on that information, we can then decide if we want to block or allow the build. We have more flexibility if we use the CLI."
"The solution has great features and is quite stable."
"The most valuable features include enriched information around the vulnerabilities for better triaging, in terms of the vulnerability layer origin and vulnerability tree."
"We feel more secure because we do have a way to measure the security and the risk factors of projects."
 

Cons

"The biggest friction point or frustration I have encountered with Microsoft Purview Communication Compliance is cost-wise it is acceptable, but sometimes unexpected errors will occur, though this happens very rarely."
"The product should incorporate more automation with the help of AI."
"Microsoft Purview Communication Compliance can be improved by having more tutorials available for those who aren't used to using this platform."
"Monitoring and compliance for web applications could be improved."
"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license. Adjusting the policy of the current setup of recording this report is something that can improve. For instance, if you have a certain license, you receive a rating, and the rating of this license remains the same for any use case. No matter if you are using it internally or using it externally, you cannot make the adjustment to your use case. It will always alert as a risky license. The areas of licenses in the reporting and adjustments can be improve"
"We would like to have upfront knowledge on how easy it should be to just pull in an upgraded dependency, e.g., even introduce full automation for dependencies supposed to have no impact on the business side of things. Therefore, we would like some output when you get the report with the dependencies. We want to get additional information on the expected impact of the business code that is using the dependency with the newer version. This probably won't be easy to add, but it would be helpful."
"For the areas that they're new in, it's very early stages for them. For example, their expertise is in looking at third-party components and packages, which is their bread-and-butter and what they've been doing for ages, but for newer features such as static analysis I don't think they've got compatibility for all the languages and frameworks yet."
"It lists projects. So, if you have a number of microservices in an enterprise, then you could have pages of findings. Developers will then spend zero time going through the pages of reports to figure out, "Is there something I need to fix?" While it may make sense to list all the projects and issues in these very long lists for completeness, Snyk could do a better job of bubbling up and grouping items, e.g., a higher level dashboard that draws attention to things that are new, the highest priority things, or things trending in the wrong direction. That would make it a lot easier. They don't quite have that yet in container security."
"We were using Microsoft Docker images. It was reporting some vulnerabilities, but we were not able to figure out the fix for them. It was reporting some vulnerabilities in the Docker images given by Microsoft, which were out of our control. That was the only limitation. Otherwise, it was good."
"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license."
"We use Bamboo for CI.CD, and we had problems integrating Snyk with it. Ultimately, we got the two solutions to work together, but it was difficult."
"The documentation sometimes is not relevant. It does not cover the latest updates, scanning, and configurations. The documentation for some things is wrong and does not cover some configuration scannings for the multiple project settings."
 

Pricing and Cost Advice

Information not available
"The price is good. Snyk had a good price compared to the competition, who had higher pricing than them. Also, their licensing and billing are clear."
"The product's price is okay."
"For what Snyk offers, it has the best cost-benefit I have ever seen because you're buying the license per user."
"The solution is less expensive than Black Duck."
"It's inexpensive and easy to license. It comes in standard package sizing, which is straightforward. This information is publicly found on their website."
"It is pretty expensive. It is not a cheap product."
"The pricing is reasonable."
"You can get a good deal with Snyk for pricing. It's a little expensive, but it is worth it."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
12%
Manufacturing Company
9%
Outsourcing Company
9%
Financial Services Firm
13%
Manufacturing Company
11%
Computer Software Company
9%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise10
Large Enterprise24
 

Questions from the Community

What needs improvement with Microsoft Purview Communication Compliance?
The biggest friction point or frustration I have encountered with Microsoft Purview Communication Compliance is cost-wise it is acceptable, but sometimes unexpected errors will occur, though this h...
What advice do you have for others considering Microsoft Purview Communication Compliance?
The scope of Microsoft Purview Communication Compliance is a team-wide workflow. The first thing I do when I open Microsoft Purview Communication Compliance is check how many workspaces are availab...
What is your experience regarding pricing and costs for Microsoft Purview Communication Compliance?
Microsoft Purview Communication Compliance is a bit expensive, $500 per license, but it is cheaper compared to products like ComplyAd, GeoComply, and ComplyAdvantage.
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
What is your primary use case for Snyk?
I use Snyk ( /products/snyk-reviews ) in the DevOps pipeline to identify vulnerabilities before deploying the application. It integrates with Jenkins ( /products/jenkins-reviews ).
 

Also Known As

No data available
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

Information Not Available
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about Microsoft Purview Communication Compliance vs. Snyk and other solutions. Updated: August 2026.
908,834 professionals have used our research since 2012.