Overview
- Transparency
- 7 / 10
- Trust
- 98 / 100
Trains on your data
- Free
- No
- Paid
- No
- Opt-out
- Not captured
Incidents
00
Assessed SEP 21, 2026 · Checked by hand SEP 21, 2026
Snyk confirms SOC 2, ISO 27001, ISO 27017, GDPR and no training on customer code; its terms, subprocessors and three hosting regions were verified.
Trust breakdown
98 / 100
Overall trust score
Data and privacy
Trains on your data
No training on user data
Storage regions
Sub-processors
Data retention
Snyk accesses your repository code for a one-time analysis and caches the source code according to the Cloud provider's storage minimum policy.
Deletion: You may request that we delete your personal information.
Powered by
Snyk uses a hybrid approach, combining proprietary AI (DeepCode AI) with third-party large language models (LLMs) from providers like OpenAI, Anthropic (Claude models via AWS Bedrock and GCP Vertex), and Google (Gemini models via AWS Bedrock and GCP Vertex).
Integrations and access
Integrations
Available on
Pricing
Free
$0/month
200 Open Source tests/month, 100 Code tests/month, 300 IaC tests/month, 100 Container tests/month
Team
$25/month
Increased test limits per product, Jira Integration, Next business day support. Minimum 5, maximum 10 contributing developers per org. 1,000 Open Source tests/month, up to 1,000 Code tests/month, unlimited IaC and Container tests.
Ignite
$1,260/year
Full platform capabilities access, unlimited code tests, custom security rules & risk-based prioritization. Up to 50 contributing developers.
Enterprise
Custom
Contact Sales for pricing. Includes Zero-day risk prevention, unified AppSec control & strategic security oversight, full SDLC automation, SSO/SAML, custom RBAC, compliance reports, unlimited testing, 24/7 support.
Prices as listed on SEP 21, 2026; check the vendor's page.
Company
Snyk
- Founded
- 2015
- HQ
- Boston, Massachusetts, USA
- Site
- snyk.io
Popularity
Not disclosed
monthly visits
Notable customers
Snyk is recognized as a market leader in the Developer Tools sector and in application security testing, with a strong presence and customer trust.
Value and ROI
What it should move: It shortens remediation and finds more security issues before release.
Best fit
It fits teams that assign findings inside repositories and delivery pipelines.
The catch
Scanning can create a large backlog. Teams need rules for access, false positives, priorities, and remediation owners.
- Salesforce: Uses Snyk to scan repositories for open-source vulnerabilities during software review.[1]
- Pearson: Uses Snyk for automated dependency scanning across application development.[2]
In our stacks for