Company
Date Published
Author
Guy Podjarny
Word count
470
Language
English
Hacker News points
None

Summary

Snyk is a tool that helps developers find and fix known vulnerabilities in their Node.js dependencies, making it easier for attackers to track and exploit them. Snyk's goal is to make it easy for developers to fix security issues first, focusing on fixing security issues rather than just finding them. To secure a project, developers can install Snyk using npm and run its wizard, which guides them through several steps including matching dependencies against the vulnerability database, understanding and fixing each security issue found, suggesting direct dependency upgrades, and notifying users when a new remediation path is made available. Once vulnerabilities are fixed, developers can use Snyk test to avoid shipping with vulnerabilities in their CI/CD systems, snyk protect to patch vulnerabilities, and snyk monitor to remember which dependencies they use so they can be notified about newly disclosed vulnerabilities that affect them. Additionally, Snyk provides a feature for open source package creators to ensure they're not distributing vulnerabilities to their users.