Snyk

Snyk Limited is a developer-oriented cybersecurity company headquartered in Boston, Massachusetts, that builds tooling to find and fix security vulnerabilities across custom-written code, open-source dependencies, container images, infrastructure as code and cloud configurations. Its core products include Snyk Open Source (open-source dependency vulnerabilities), Snyk Code (static application security testing), Snyk Container (container images and Kubernetes applications) and Snyk IaC (Terraform and Kubernetes misconfigurations), all reachable through the Snyk CLI, IDE plugins and CI/CD pipelines. The company maintains a vulnerability database recording security issues found in open-source libraries together with remediation guidance.

More recently Snyk has positioned its offering as an AI security platform, marketed as an independent validation layer that checks AI-generated code, governs development agents and secures AI-native applications, with integrations into AI coding assistants such as Claude Code, Cursor and Codex. In May 2025 it launched an AI Trust Platform aimed at reducing risk in AI applications, and it publishes research such as a state of agentic AI adoption report and a Forrester Total Economic Impact study of the platform.

Snyk distributes a substantial amount of open-source tooling through its GitHub organization, including the Snyk CLI, driftctl (infrastructure drift detection), an agent-scan security scanner for AI agents, MCP servers and agent skills, GitHub Actions, and plugins for Visual Studio, Visual Studio Code, IntelliJ-based IDEs and Eclipse.

Founding story

Snyk was founded in 2015 in Tel Aviv and London by Guy Podjarny, Danny Grander and Assaf Hefetz, all alumni of the Israel Defense Forces' Unit 8200 signals intelligence unit. Podjarny had been CTO of Akamai's web performance business unit after Akamai's 2012 acquisition of his startup Blaze.io, and previously worked at Sanctum, Watchfire and IBM, where he led the AppScan mobile security product; Grander had worked in security engineering at Skybox Security and as CTO at Gita Technologies, and Hefetz held a senior research role at Skycure. The company was initially conceived as a runtime instrumentation tool before pivoting to a SaaS platform for automated scanning of open-source dependencies, launching a beta at the Velocity Amsterdam conference in October 2015. The name derives from "sneak" and an Urban Dictionary entry for "so now you know."

Business model

Snyk sells its security platform to enterprises, offering a free self-service tier that developers can sign up for without a credit card alongside paid platform subscriptions; customers frequently consolidate multiple application security tools onto the platform.

Subscription-based sales of the Snyk security platform and its component products (Open Source, Code, Container, IaC, cloud and AI security), reported as annual recurring revenue.

Traction

More than 4,500 customers as of 2025 and over $300 million in annual recurring revenue, with Snyk Code contributing over $100 million. In 2022 the company reported more than 2,300 customers, 100% year-over-year revenue growth, net revenue retention above 130%, over 70% of customers using multiple platform elements, and customers fixing more than 5.1 million vulnerabilities and remediating over 11.5 million security issues. Reported revenue was $220 million in 2023 with a net loss of $176 million. The Snyk CLI repository has about 5,700 GitHub stars and the agent-scan project about 3,000.

Latest developments

In 2025 Snyk launched an AI Trust Platform (May 2025) and completed acquisitions of Invariant Labs and Probely; its current website markets an AI Security Platform covering AI-generated code, development agents and AI-native applications, alongside an open-source agent-scan tool for AI agents, MCP servers and agent skills and an experimental CLI agent mode for AI coding agents.