Snyk was founded in 2015 by Guy Podjarny, Assaf Hefetz, and Danny Grander in London. Podjarny, a former CTO of Akamai’s web performance division, recognized that traditional security tools weren’t built for modern development workflows. Developers needed security scanning that worked inside their existing tools, not as an afterthought.
Snyk’s platform scans for vulnerabilities across four areas: open-source dependencies (Snyk Open Source), application code (Snyk Code), container images (Snyk Container), and infrastructure-as-code files (Snyk IaC). Results appear directly in IDEs, pull requests, and CI/CD pipelines.
The company raised over $1 billion in total funding and reached a peak valuation of $8.5 billion in 2021. Like many security startups, its valuation has been adjusted in subsequent years as market conditions shifted. Snyk has over 2,400 enterprise customers, including companies like Google, Salesforce, Intuit, and Atlassian.
Snyk’s vulnerability database is one of its key assets. The research team actively discovers, verifies, and catalogues vulnerabilities in open-source packages. This proprietary intelligence powers the platform’s scanning accuracy and remediation suggestions.
The “developer-first security” positioning has proven influential. Before Snyk, most security scanning tools produced reports that security teams would hand to developers, creating friction and delays. Snyk flipped this model by putting controls in the developer’s hands.
Headquartered in London and Boston with offices globally, Snyk employs over 1,000 people. The company has been growing its annual recurring revenue and working toward profitability amid a tightening market for security startups.