No more typing reviews! Try our Samantha, our new voice AI agent.

Snyk pros and cons

Vendor: Snyk

4.1 out of 5

51 reviews
100% willing to recommend

Pros & Cons summary

Snyk offers automated vulnerability detection and monitoring, enhancing security with seamless integration with platforms like GitLab and JIRA. Its command-line interface allows flexible management, while its comprehensive vulnerability database minimizes false positives. AI-powered scanning provides insights into open-source components, despite challenges like insufficient documentation, limited language support, and integration issues. High pricing and restricted API access for lower-tier users are drawbacks, yet Snyk remains valuable for efficient vulnerability management.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Snyk provides automated vulnerability detection and monitoring, helping organizations improve security posture by identifying vulnerabilities and enhancing awareness.

The integration capabilities with platforms like GitLab and JIRA streamline development workflows, making vulnerability tracking and management more efficient.

Snyk's command-line interface offers flexibility for developers to manage and customize scanning outputs according to specific needs in the development pipeline.

Snyk is praised for its comprehensive vulnerability database and accuracy, which reduces the number of false positives and enhances security measures.

The AI-powered scanning and software composition analysis features of Snyk offer detailed insights into open-source components and dependencies, helping users address security concerns effectively.

CONS

Snyk lacks sufficient documentation, leading to challenges in troubleshooting and delayed issue resolution.

There is a need for more comprehensive scanning capabilities, including better support for various programming languages and dynamic scanning features.

False positives are a significant issue, causing unnecessary alerts for vulnerabilities that are not exploitable or relevant.

Integration challenges exist, particularly with development tools like IDE plugins, Bamboo, and other systems.

Pricing can be expensive, and there is limited API access for lower-tier users.

Snyk Pros review quotes

Software Engineer at a computer software company with 11-50 employees

Nov 15, 2025

Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients.

Read full review

reviewer2731785

Information Security Strategy at a insurance company with 10,001+ employees

Jun 30, 2025

The best feature of Snyk is the integration with our ticketing system, which is Jira.

Read full review

Senior DevSecOps at V8

Sep 23, 2025

They evolved their maturity because they could find the vulnerabilities before the pipeline runs.

Read full review

Free Report: Snyk Reviews and More

Learn what your peers think about Snyk. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.

893,244 professionals have used our research since 2012.

CEO at a computer software company with 10,001+ employees

Oct 8, 2025

The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point.

Read full review

Director at Marsh

Mar 17, 2025

Snyk provides a lot of information on vulnerabilities, the packages being used, and their dependencies, giving good insight into the security of those packages.

Read full review

Tech Lead DevSecOps at Letsbank

Jul 5, 2023

I find SCA to be valuable. It can read your libraries, your license and bring the best way to resolve your problem in the best scenario.

Read full review

Software Quality Coordinator at a retailer with 10,001+ employees

Oct 7, 2024

The valuable aspect is its security capabilities.

Read full review

Jayashree Acharyya

Director at PepsiCo

Mar 4, 2024

The solution's Open Source feature gives us notifications and suggestions regarding how to address vulnerabilities.

Read full review

Devops & Cloud Architect at Hexaware Technologies Limited

Nov 14, 2023

Snyk is a good and scalable tool.

Read full review

NH

Student at VNU

May 28, 2024

Snyk's focus on security is a valuable feature. Also Snyk supports multiple programming languages, which has positively affected my security practices. I use only two or three languages, and when I change the language in a file, it detects it in the same suite. I find the AI-powered scanning overall beneficial.Using Snyk's AI-powered scanning, I can detect around ten or twenty errors in my project with about twenty thousand lines of code, so it helps improve my project by identifying a lot of potential vulnerabilities.

Read full review

Show 10 more reviews (out of 50)

Snyk Cons review quotes

Software Engineer at a computer software company with 11-50 employees

Nov 15, 2025

Although Snyk is strong, sometimes it flags vulnerabilities that are not reachable, not exploitable, and not relevant to a project.

Read full review

reviewer2731785

Information Security Strategy at a insurance company with 10,001+ employees

Jun 30, 2025

Snyk should improve the scanning capabilities for other languages. For example, Veracode is strong with different languages such as Java, C#, and others.

Read full review

Senior DevSecOps at V8

Sep 23, 2025

Technically, we have better vulnerabilities detection in Checkmarx and Veracode. Both of them are more precise about vulnerabilities detection.

Read full review

Free Report: Snyk Reviews and More

Learn what your peers think about Snyk. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.

893,244 professionals have used our research since 2012.

CEO at a computer software company with 10,001+ employees

Oct 8, 2025

Snyk has several limitations, including issues with Gradle, NPM, and Xcode, and trouble with AutoPR.

Read full review

Director at Marsh

Mar 17, 2025

There are a lot of false positives that need to be identified and separated.

Read full review

Tech Lead DevSecOps at Letsbank

Jul 5, 2023

They need to improve the Snyk plugins and make it easier to make your optimizations based on your own needs or features.

Read full review

Software Quality Coordinator at a retailer with 10,001+ employees

Oct 7, 2024

We had some issues integrating into our pipeline, however, they were resolved.

Read full review

Jayashree Acharyya

Director at PepsiCo

Mar 4, 2024

The solution's integration with JFrog Artifactory could be improved.

Read full review

Devops & Cloud Architect at Hexaware Technologies Limited

Nov 14, 2023

I think Snyk should add more of a vulnerability protection feature in the tool since it is an area where it lacks.

Read full review

NH

Student at VNU

May 28, 2024

I use Snyk alongside Sonar, and Snyk tends to generate a lot of false positives. Improving the overall report quality and reducing false positives would be beneficial. I don't need additional features; just improving the existing ones would be enough.

Read full review

Show 10 more reviews (out of 50)

Related questions

237

Which software is ideal for code quality and security?

103

How does Snyk compare with SonarQube?

36

How do you use Snyk for running SAST?

39

What do I scan when changing code in Snyk?

228

If you had to both encrypt and compress data during transmission, which would you do first and why?

154

When evaluating Application Security, what aspect do you think is the most important to look for?

276

What are the threats associated with using ‘bogus’ cybersecurity tools?

243

What are the Top 5 cybersecurity trends in 2022?

142

Which application security solutions include both vulnerability scans and quality checks?

157

We're evaluating Tripwire, what else should we consider?