Try our new research platform with insights from 80,000+ expert users

Diligent One Platform (formerly Highbond) vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Diligent One Platform (form...
Ranking in GRC
20th
Average Rating
8.6
Reviews Sentiment
6.8
Number of Reviews
3
Ranking in other categories
IT Governance (9th), IT Vendor Risk Management (25th)
Snyk
Ranking in GRC
5th
Average Rating
8.0
Reviews Sentiment
7.3
Number of Reviews
49
Ranking in other categories
Application Performance Monitoring (APM) and Observability (18th), Application Security Tools (6th), Static Application Security Testing (SAST) (8th), Cloud Management (14th), Vulnerability Management (14th), Container Security (6th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (15th), DevSecOps (2nd), Application Security Posture Management (ASPM) (2nd)
 

Mindshare comparison

As of October 2025, in the GRC category, the mindshare of Diligent One Platform (formerly Highbond) is 2.7%, down from 3.5% compared to the previous year. The mindshare of Snyk is 1.4%, up from 0.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Market Share Distribution
ProductMarket Share (%)
Snyk1.4%
Diligent One Platform (formerly Highbond)2.7%
Other95.9%
GRC
 

Featured Reviews

WW
Good automation and analytics, but is costly
The report model was our main concern. I believe currently the solution uses a third party for the reporting. As part of a consulting firm, one of the challenges we face is the difficulty in producing reports that meet the expectations of our clients and customers. It would be beneficial if the focus could be shifted toward improving the reporting aspect. The impact report is a crucial aspect, as we only have one opportunity to create it. Galvanize HighBond can improve by generating more impact reports post-project, and allowing access to the reports using a web version, which would greatly benefit us. The cost of the solution is expensive and needs improvement.
meetharoon - PeerSpot reviewer
Affordable tool boosts code scanning efficiency but faces integration hurdles
I lead a code security practice for our organization. We integrated Snyk into our GitHub, using CLI to automatically scan codebases and identify issues. We are a large organization with three independent entities, consolidating Snyk across all entities.  We also provide access through numerous…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The most valuable feature is automation."
"The product's most valuable features are an open-source platform, remote functionality, and good pricing."
"We use Snyk to check vulnerabilities and rectify potential leaks in GitHub."
"The most valuable features of Snyk are vulnerability scanning and automation. The automation the solution brings around vulnerability scanning is useful."
"A main feature of Snyk is that when you go with SCA, you do get properly done security composition, also from the licensing and open-source parameters perspective. A lot of companies often use open-source libraries or frameworks in their code, which is a big security concern. Snyk deals with all the things and provides you with a proper report about whether any open-source code or framework that you are using is vulnerable. In that way, Snyk is very good as compared to other tools."
"Our overall security has improved. We are running fewer severities and vulnerabilities in our packages. We fixed a lot of the vulnerabilities that we didn't know were there."
"Its reports are nice and provide information about the issue as well as resolution. They also provide a proper fix. If there's an issue, they provide information in detail about how to remediate that issue."
"The solution has great features and is quite stable."
"The advantage of Snyk is that Snyk automatically creates a pull request for all the findings that match or are classified according to the policy that we create. So, once we review the PR within Snyk and we approve the PR, Snyk auto-fixes the issue, which is quite interesting and which isn't there in any other product out there. So, Snyk is a step ahead in this particular area."
 

Cons

"The cost of the solution is expensive and needs improvement."
"It can be improved from the reporting perspective and scanning perspective. They can also improve it on the UI front."
"I use Snyk alongside Sonar, and Snyk tends to generate a lot of false positives. Improving the overall report quality and reducing false positives would be beneficial. I don't need additional features; just improving the existing ones would be enough."
"The product is very expensive."
"For the areas that they're new in, it's very early stages for them. For example, their expertise is in looking at third-party components and packages, which is their bread-and-butter and what they've been doing for ages, but for newer features such as static analysis I don't think they've got compatibility for all the languages and frameworks yet."
"There are some new features that we would like to see added, e.g., more visibility into library usage for the code. Something along the lines where it's doing the identification of where vulnerabilities are used, etc. This would cause them to stand out in the market as a much different platform."
"All such tools should definitely improve the signatures in their database. Snyk is pretty new to the industry. They have a pretty good knowledge base, but Veracode is on top because Veracode has been in this business for a pretty long time. They do have a pretty large database of all the findings, and the way that the correlation engine works is superb. Snyk is also pretty good, but it is not as good as Veracode in terms of maintaining a large space of all the historical data of vulnerabilities."
"We had some issues integrating into our pipeline, however, they were resolved."
"The reporting mechanism of Snyk could improve. The reporting mechanism is available only on the higher level of license. Adjusting the policy of the current setup of recording this report is something that can improve. For instance, if you have a certain license, you receive a rating, and the rating of this license remains the same for any use case. No matter if you are using it internally or using it externally, you cannot make the adjustment to your use case. It will always alert as a risky license. The areas of licenses in the reporting and adjustments can be improve"
 

Pricing and Cost Advice

"I give the cost of the solution a six out of ten."
"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."
"Presently, my company uses an open-source version of the solution. The solution's pricing can be considered quite reasonable owing to the features they offer."
"Snyk is an expensive solution."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing a three. It is a cheap solution."
"It is pretty expensive. It is not a cheap product."
"The product has good pricing."
"Cost-wise, it's similar to Veracode, but I don't know the exact cost."
"Their licensing model is fairly robust and scalable for our needs. I believe we have reached a reasonable agreement on the licensing to enable hundreds of developers to participate in this product offering. The solution is very tailored towards developers and its licensing model works well for us."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
869,566 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Manufacturing Company
8%
Computer Software Company
7%
Energy/Utilities Company
6%
Financial Services Firm
15%
Computer Software Company
13%
Manufacturing Company
9%
Insurance Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise9
Large Enterprise21
 

Questions from the Community

Ask a question
Earn 20 points
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
 

Also Known As

Rsam GRC, HighBond, HighBond by Galvanize , Diligent GRC Platform
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

CNA Insurance
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about RSA, OneTrust, Diligent and others in GRC. Updated: September 2025.
869,566 professionals have used our research since 2012.