Try our new research platform with insights from 80,000+ expert users

CloudCheckr vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CloudCheckr
Ranking in Cloud Management
28th
Average Rating
7.6
Reviews Sentiment
7.3
Number of Reviews
8
Ranking in other categories
Cloud Cost Management (10th), Managed Cloud Services (5th)
Snyk
Ranking in Cloud Management
14th
Average Rating
8.0
Reviews Sentiment
7.4
Number of Reviews
48
Ranking in other categories
Application Security Tools (5th), Static Application Security Testing (SAST) (8th), Container Security (5th), Software Composition Analysis (SCA) (2nd), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (16th), DevSecOps (2nd), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of July 2025, in the Cloud Management category, the mindshare of CloudCheckr is 1.2%, up from 1.1% compared to the previous year. The mindshare of Snyk is 1.2%, up from 0.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Management
 

Featured Reviews

Peter Ramnath - PeerSpot reviewer
Provides recommendations regarding how cost and consumption can be adjusted, but the reporting and analytic capabilities are very limited
We are not happy with the product’s reporting capabilities. We are planning to change the solution. The security compliance feature doesn’t give much data because CloudCheckr has done a majority of its development on AWS. The majority of our clients are on Microsoft Azure. There are a lot of features and information available for Amazon, but not for Azure. The tool wasn't meeting our expectations. The reporting and analytic capabilities are very limited. There's no ability to do scheduled email reports. The report could only be sent to a single email address. The tool was not very usable. We had multiple clients and tasks to work with.
meetharoon - PeerSpot reviewer
Affordable tool boosts code scanning efficiency but faces integration hurdles
The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point. It is easy to consolidate Snyk across multiple entities within a large organization. Additionally, our integration of Snyk into GitHub allows us to automatically scan codebases and identify issues, which has improved efficiency.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best feature I like about CloudCheckr CMx High Security is its simplicity. I love that it's not rocket science to use the solution. Even if you're not familiar with the cloud, you can easily figure out how to use CloudCheckr CMx High Security. You can use AWS, you can use Azure, and you can use GCP with the solution because the integration is quite simple. You can also use multi-cloud with it, and you could see the billing part. You'll have complete visibility into your cost which I love about the solution. I also love that data on any security issues and vulnerabilities are available on the go with CloudCheckr CMx High Security. You don't need to do anything different. Just run the scan and you'll have all these open findings in the tool, in terms of the priority level, so if it's critical, it will tell you, "It's critical," and you need to fix it right away."
"The most valuable feature of CloudCheckr CMx High Security is granular reporting. Additionally, the user interface is easy to use."
"The recommendation section is pretty helpful."
"It will automatically suggest areas for optimization."
"The solution is mostly stable."
"It's one of the leading players for cloud optimization. It's hard to find anything better."
"The solution is scalable for our purposes."
"The initial setup is straightforward."
"The customization is excellent."
"It is easy for developers to use. The documentation is clear as well as the APIs are good and easily readable. It's a good solution overall."
"There are many valuable features. For example, the way the scanning feature works. The integration is cool because I can integrate it and I don't need to wait until the CACD, I can plug it in to our local ID, and there I can do the scanning. That is the part I like best."
"Our overall security has improved. We are running fewer severities and vulnerabilities in our packages. We fixed a lot of the vulnerabilities that we didn't know were there."
"The most valuable features are their GitLab and JIRA integrations. The GitLab integration lets us pull projects in pretty easily, so that it's pretty minimal for developers to get it set up. Using the JIRA integration, it's also pretty easy to get the information that is generated, as a result of that GitLab integration, back to our teams in a non-intrusive way and in a workflow that we are already using."
"The code scans on the source code itself were valuable."
"The CLI feature is quite useful because it gives us a lot of flexibility in what we want to do. If you use the UI, all the information is there and you can see what Snyk is showing you, but there is nothing else that you can change. However, when you use the CLI, then you can use commands and can get the output or response back from Snyk. You can also take advantage of that output in a different way. For the same reason, we have been using the CLI for the hard gate in the pipeline: Obtain a particular CDSS score for vulnerability. Based on that information, we can then decide if we want to block or allow the build. We have more flexibility if we use the CLI."
"The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities."
 

Cons

"The solution needs to work better with larger capacities of data."
"The solution must improve its user interface."
"The performance of the tool really needs to be improved."
"What needs to be improved in CloudCheckr CMx High Security is integration. All the clouds are going quite fast, for example, all the cloud providers: Microsoft, Google, etc. CloudCheckr CMx High Security is good with AWS, no doubt about it, but with Azure and Google Cloud, I find that the solution is slow in that direction. If the vendor planned for CloudCheckr CMx High Security to be automated just for AWS, then it does make sense. If not, if the vendor is also targeting good integration with Google and Microsoft, then CloudCheckr CMx High Security integration needs improvement, in particular, it has to be faster. At the moment, its integration with Azure is not as good as its integration with AWS. With GCP, integration is nowhere."
"Self-healing could be a bit smoother and a bit cleaner, easier to access and more functional. That would help."
"CloudCheckr CMx High Security is complex. There are a lot of menus, and if you do not know what you are looking for you can get lost. However, the interface is self-explanatory. It's easy to understand where to go to get what you want."
"The reporting and analytic capabilities are very limited."
"Many features still need to be implemented in this tool."
"We had some issues integrating into our pipeline, however, they were resolved."
"I would like to give further ability to grouping code repositories, in such a way that you could group them by the teams that own them, then produce alerting to those teams. The way that we are seeing it right now, the alerting only goes to a couple of places. I wish we could configure the code to go to different places."
"DAST has shortcomings, and Snyk needs to improve and overcome such shortcomings."
"The tool should provide more flexibility and guidance to help us fix the top vulnerabilities before we go into production."
"For the areas that they're new in, it's very early stages for them. For example, their expertise is in looking at third-party components and packages, which is their bread-and-butter and what they've been doing for ages, but for newer features such as static analysis I don't think they've got compatibility for all the languages and frameworks yet."
"Offering API access in the lower or free open-source tiers would be better. That would help our customers. If you don't have an enterprise plan, it becomes challenging to integrate with the rest of the systems. Our customers would like to have some open-source integrations in the next release."
"It can be improved from the reporting perspective and scanning perspective. They can also improve it on the UI front."
"The way Snyk notifies if we have an issue, there are a few options: High vulnerability or medium vulnerability. The problem with that is high vulnerabilities are too broad, because there are too many. If you enable notifications, you get a lot of notifications, When you get many notifications, they become irrelevant because they're not specific. I would prefer to have control over the notifications and somehow decide if I want to get only exploitable vulnerabilities or get a specific score for a vulnerability. Right now, we receive too many high vulnerabilities. If we enable notifications, then we just get a lot of spam message. Therefore, we would like some type of filtering system to be built-in for the system to be more precise."
 

Pricing and Cost Advice

"The cost is on par with other providers."
"The solution is reasonably priced."
"A license is needed to use CloudCheckr CMx High Security, but because we are a managed service provider, the price of the license would vary. It depends on the type of cloud users we have, for example, it would be some type of percentage or monthly billing, etc."
"With Snyk, you get what you pay for. It is not a cheap solution, but you get a comprehensiveness and level of coverage that is very good. The dollars in the security budget only go so far. If I can maximize my value and be able to have some funds left over for other initiatives, I want to do that. That is what drives me to continue to say, "What's out there in the market? Snyk's expensive, but it's good. Is there something as good, but more affordable?" Ultimately, I find we could go cheaper, but we would lose the completeness of vision or scope. I am not willing to do that because Snyk does provide a pretty important benefit for us."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing a three. It is a cheap solution."
"The pricing is acceptable, especially for enterprises. I don't think it's too much of a concern for our customers. Something like $99 per user is reasonable when the stakes are high."
"The pricing is reasonable."
"The solution is less expensive than Black Duck."
"The license model is based on the number of contributing developers. Snyk is expensive, for a startup company will most likely use the community edition, while larger companies will buy the licensed version. The price of Snyk is more than other SLA tools."
"Snyk is a premium-priced product, so it's kind of expensive. The big con that I find frustrating is when a company charges extra for single sign-on (SSO) into their SaaS app. Snyk is one of the few that I'm willing to pay that add-on charge, but generally I disqualify products that charge an extra fee to do integrated authentication to our identity provider, like Okta or some other SSO. That is a big negative. We had to pay extra for that. That little annoyance aside, it is expensive. You get a lot out of it, but you're paying for that premium."
"Compared to Veracode, Snyk is definitely a cheaper tool."
report
Use our free recommendation engine to learn which Cloud Management solutions are best for your needs.
859,687 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
20%
Financial Services Firm
9%
Manufacturing Company
8%
Government
7%
Financial Services Firm
16%
Computer Software Company
14%
Manufacturing Company
9%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about CloudCheckr ?
The recommendation section is pretty helpful.
What is your experience regarding pricing and costs for CloudCheckr ?
The price depends on the actual Azure consumption and what we feed into it. The cost is on par with other providers.
What needs improvement with CloudCheckr ?
We are not happy with the product’s reporting capabilities. We are planning to change the solution. The security compliance feature doesn’t give much data because CloudCheckr has done a majority of...
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
 

Comparisons

 

Also Known As

CloudCheckr CMx High Security, CloudCheckr CMP
Fugue
 

Overview

 

Sample Customers

Accenture, Logitech, Ingram, Cloudar, Infor, DXC, Cornell University, DLT, Lumen, Lightstream, Choice Hotels, B-Tech, SmileShark, PTP, Explicity, JCH Technology, Siemens Mobility
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about Nutanix, VMware, IBM and others in Cloud Management. Updated: June 2025.
859,687 professionals have used our research since 2012.