Snyk
Developer-first security platform for finding and fixing open-source vulnerabilities
About Snyk
Snyk scans open-source dependencies, container images, infrastructure as code, and application code for known vulnerabilities and license issues. It integrates into IDEs, CI/CD pipelines, and pull request workflows to surface issues earlier in development. Snyk's AI Fix feature can automatically generate patches for certain vulnerability classes directly in the developer's workflow.
Key features
- Dependency scanning for 50+ languages/package managers
- Container and IaC vulnerability scanning
- AI Fix: auto-generated vulnerability patches
- Pull request security checks
- IDE plugins for VS Code, IntelliJ, Eclipse
- License compliance detection
Pricing
Free
200 open-source tests/mo, unlimited for OSS
Team
From $25/mo — unlimited tests, PR checks
Enterprise
Custom — SSO, reporting, SLA