Cyber Security

3 big Amazon S3 vulnerabilities you may be missing

Amazon S3 is incredibly flexible and easy-to-use, but S3 security is more complex and requires a deeper understanding of the layers of S3 security options and the full context of your unique cloud use case to get it right.

Snyk launches DevSecOps Hub

To help organizations more quickly and decisively evolve a DevOps culture that effectively incorporates security, Snyk has launched our DevSecOps Hub.

Manage risk more efficiently using Snyk’s new Project Tags API

Tagging projects is possible today via the Snyk API and allows you to group and filter your projects based on the tags you’ve applied. This feature will be available in the UI soon.

Detecting application vulnerabilities in container images

Snyk now makes it even easier for you to detect vulnerabilities in container images, by identifying vulnerable application dependencies alongside the operating system vulnerability.

Open source tools for Terraform code testing

Learn about some great open source tools for Terraform code testing, like TFLint, Terratest, GOSS, and more.

Website security score explained

A moment of respite for our mental health

The topic of mental wellness, most specifically in the form of burnout, is a very real one at Snyk.

Managing license compliance across your organization with Snyk’s license policies

You can now use Snyk to create your own policies and use these rules to help your development teams easily find and fix what is most critical to your projects, while minimizing the distractions created by less pressing issues.

Snyk achieves AWS Lambda Ready designation

We are excited to extend our partnership with AWS and announce we have achieved the AWS Lambda Ready designation, part of the Amazon Web Services (AWS) Service Ready Program.

Snyk and Red Hat empower developers to secure OpenShift applications

We’re excited to share that Snyk and Red Hat have been working together to make it easier for developers to create secure applications built on open source and run them securely on OpenShift.

Why did is-promise happen and what can we learn from it

On the 25th of April 2020, version 2.2.0 of is-promise library on npm was released by JavaScript developer and maintainer Forbes Lindesay. Reportedly, this release caused failures in popular developer build tools used for scaffolding new projects, such as Facebook’s create-react-app, Google’s firebase-tools, angular-cli, and others.