initial

2026-02-02 13:41:43 +02:00
commit 6c65691b2e
@@ -0,0 +1,111 @@
+# Snyk - Enterprise Compatibility Evaluation
+
+## Tool Overview
+**Name:** Snyk
+**Website:** https://snyk.io
+**Category:** AI-Powered Developer Security Platform
+**Date Evaluated:** 2026-02-02
+
+---
+
+## Privacy & Enterprise Use
+
+### Commercial/Enterprise Use Permission
+**Status:** ✅ APPROVED FOR ENTERPRISE USE
+
+- Designed specifically for enterprise and commercial use
+- Dedicated Enterprise plan with custom pricing
+- Enterprise-grade security and compliance certifications
+- SSO, Jira integration, custom user roles
+
+### Model Training on User Data
+**Status:** ✅ NO TRAINING ON CUSTOMER CODE
+
+**Critical Privacy Protections:**
+- DeepCode AI trained ONLY on permissively licensed open-source projects - NEVER customer data
+- No proprietary code used for training, optimizing, or fine-tuning AI models
+- No customer data retained - Snyk does not keep customer code
+- Short-term caching only for security analysis
+- Customer code never used for engine training or fix examples
+
+**AI Approach:** Hybrid Symbolic AI + Generative AI
+- Symbolic AI: Mathematical proof of code paths, near-zero false positives
+- Generative AI: Plain English explanations, code fix generation
+
+### Data Retention & Sharing
+**Status:** ✅ MINIMAL RETENTION, NO EXTERNAL SHARING
+
+- Short-term caching only for security analysis
+- No long-term storage of customer code
+- Customer code NOT shared externally
+- On-premise container registries supported
+
+### IP & Confidentiality
+**Status:** ✅ STRONG PROTECTIONS
+
+- Customers own their code and fixes
+- Clear separation: training data (open source) vs customer data (never used)
+- SOC 2 Type II, ISO 27001, GDPR compliant
+
+---
+
+## Pricing & Plans (2026)
+
+### Free Plan
+**Price:** $0/developer
+**Features:** Limited scanning capabilities
+
+### Team Plan
+**Price:** ~$105/month per developer ($1,260/year)
+- Multiple security products included
+- Real-time vulnerability scanning
+- Automated remediation suggestions
+
+### Enterprise Plan
+**Price:** Custom (varies significantly by scale)
+- 50 developers: $34,886 - $47,413/year
+- 100 developers: $67,552 - $89,858/year
+- Range: $5,000 - $70,000+ depending on needs
+
+**Enterprise Features:**
+- License compliance
+- Jira integration, Rich API, Reports
+- On-premise container registries
+- Custom user roles, security policies
+- SSO (Single Sign-On)
+
+---
+
+## Enterprise Compatibility Assessment
+
+### Strengths ✅
+- NO customer code used for AI training
+- Strong privacy and security certifications
+- Hybrid AI approach (low false positives)
+- Enterprise features (SSO, custom roles, on-premise options)
+- Clear data handling policies
+
+### Concerns ⚠️
+- Pricing can be expensive for large teams
+- Enterprise pricing not transparent (custom quotes)
+- Cloud-based analysis (not fully on-premise)
+
+### Recommendations
+- **APPROVED** for enterprise use
+- **Best for:** Organizations needing automated security scanning with AI-powered fixes
+- **Ideal customers:** Medium to large development teams, companies with security/compliance requirements
+- **Procurement:** Enterprise plan requires budget approval and custom quote
+
+---
+
+## Sources
+1. [Snyk Plans & Pricing](https://snyk.io/plans/)
+2. [DeepCode AI](https://snyk.io/platform/deepcode-ai/)
+3. [How Snyk Incorporates Generative AI](https://docs.snyk.io/snyk-data-and-governance/how-snyk-incorporates-generative-ai-into-the-platform)
+4. [Snyk Pricing 2026 - G2](https://www.g2.com/products/snyk/pricing)
+5. [Snyk Review 2026](https://aiquiks.com/ai-tools/snyk)
+
+---
+
+**Last Updated:** 2026-02-02
+**Key Finding:** Snyk provides strong enterprise privacy protections with NO customer code training. AI trained only on open-source data. Suitable for enterprise security needs.