No more typing reviews! Try our Samantha, our new voice AI agent.

SAP BusinessObjects GRC vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 3, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

SAP BusinessObjects GRC
Ranking in GRC
14th
Average Rating
7.4
Reviews Sentiment
4.2
Number of Reviews
7
Ranking in other categories
Continuous Controls Monitoring (3rd)
Snyk
Ranking in GRC
6th
Average Rating
8.2
Reviews Sentiment
7.3
Number of Reviews
52
Ranking in other categories
Application Performance Monitoring (APM) and Observability (20th), Application Security Tools (8th), Static Application Security Testing (SAST) (5th), Cloud Management (12th), Vulnerability Management (16th), Container Security (6th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (15th), DevSecOps (3rd), Application Security Posture Management (ASPM) (1st), AI Security (10th)
 

Mindshare comparison

As of August 2026, in the GRC category, the mindshare of SAP BusinessObjects GRC is 1.4%, down from 1.8% compared to the previous year. The mindshare of Snyk is 1.5%, down from 1.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
Snyk1.5%
SAP BusinessObjects GRC1.4%
Other97.1%
GRC
 

Featured Reviews

Vishal Guthula - PeerSpot reviewer
Sr Advanced Analytics Analyst at a manufacturing company with 10,001+ employees
Experienced security and easy understanding with advanced customization enhances efficiency
Regarding automation, they could enhance features for checking real-time data when someone attempts to access data without proper permissions. Currently, we do not receive immediate alerts; we only discover issues after something goes wrong. Having prevention alerts immediately when someone triggers unauthorized actions would allow us to address these situations proactively.
Abhishek-Goyal - PeerSpot reviewer
Software Engineer at a computer software company with 11-50 employees
Improves security posture by actively reducing critical vulnerabilities and guiding remediation
Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Initial setup was straightforward. It took maybe one week."
"The tool helps create reports for projects, including the creation of any ad-hoc reports"
"The customization options in the dashboards inside SAP BusinessObjects GRC are highly valuable, and the real-time monitoring feature performs effectively, allowing teams to maintain data security by restricting domain visibility."
"The best features are the scalability and flexibility to implement applications on top of the BW."
"We have enterprise clients for the product."
"It improved the organization's reporting culture, giving us insights into health, management, and operational results."
"It is wonderful from the control perspective. The GRC tools help you in knowing what are the risk controls, how to mitigate risks, and how to ensure that there are no conflicts between the roles. From the user perspective, you get to know what are the permission risks and access risks. You get a lot of useful information."
"The stability of SAP BusinessObjects GRC is acceptable."
"The most valuable features are their GitLab and JIRA integrations. The GitLab integration lets us pull projects in pretty easily, so that it's pretty minimal for developers to get it set up. Using the JIRA integration, it's also pretty easy to get the information that is generated, as a result of that GitLab integration, back to our teams in a non-intrusive way and in a workflow that we are already using."
"Snyk allows us to spend less time securing applications, increasing their productivity."
"It hits ROI for us very well in a couple of areas that we want to address: to ensure that we don't have surprises when it comes to vulnerabilities on our dependencies — libraries and images — and from a compliance point of view, we don't want to be in a situation where we're forced to publish code because someone has decided to use libraries that would force us to either publish everything under GPL or put us in a situation where licenses are not compatible and we would have to redo part of the code."
"It helps us meet compliance requirements, by identifying and fixing vulnerabilities, and to have a robust vulnerability management program."
"We feel more secure because we do have a way to measure the security and the risk factors of projects."
"The most important feature of Snyk is its cost-effectiveness compared to other solutions such as Check Point."
"The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities."
"There are many valuable features, for example the way the scanning feature works and the integration is cool because I can integrate it and I don't need to wait until the CACD, I can plug it in to our local ID and there I can do the scanning, that is the part I like best."
 

Cons

"An additional feature I would like to see is the option to add wait time and integrate sources in wait time."
"Currently, we do not receive immediate alerts; we only discover issues after something goes wrong."
"BusinessObjects is very dated. It is not that user-friendly. It should be made more user-friendly. In addition, if they could make predictive analytics an embedded part of it where people get to know what is there to offer, it would be great."
"I think the old system is better than the new one. From an improvement perspective, the tool needs to ensure that the new technologies it offers are better than the old ones."
"BusinessObjects is very dated. It is not that user-friendly."
"We cannot actively log in to the system. It should also improve support."
"The learning curve is high."
"Technical support could be better and faster."
"Technically, we have better vulnerabilities detection in Checkmarx and Veracode. Both of them are more precise about vulnerabilities detection."
"There are some new features that we would like to see added, e.g., more visibility into library usage for the code. Something along the lines where it's doing the identification of where vulnerabilities are used, etc. This would cause them to stand out in the market as a much different platform."
"The product could be improved by including other types of security scanning (e.g. SAST or DAST), which is important."
"There is always more work to do around managing the volume of information when you've got thousands of vulnerabilities. Trying to get those down to zero is virtually impossible, either through ignoring them all or through fixing them. That filtering or information management is always going to be something that can be improved."
"The tool needs improvement in license compliance. I would like to see the integration of better policy management in the product's future release. When it comes to the organization that I work for, there are a lot of business units since we are a group of companies. Each of these companies has its specific requirements and its own appetite for risk. This should be able to reflect in flexible policies. We need to be able to configure policies that can be adjusted later or overridden by the business unit that is using the product."
"It can be improved from the reporting perspective and scanning perspective. They can also improve it on the UI front."
"It would be ideal if there was customization with a focus on specific cybersecurity areas or capabilities."
"They were a couple of issues which happened because Snyk lacked some documentation on the integration side."
 

Pricing and Cost Advice

"The license is costly."
"SAP BusinessObjects GRC is expensive."
"The product's licensing costs involve a one-time purchase. The tool also allows others to make annual payments towards the licensing charges of the product."
"There is a yearly licensing cost. I would rate their pricing 4 out of 5."
"The product has good pricing."
"We do have some missing licenses issues, especially with non-SPDX compliant one, but we expect this to be fixed soon"
"We are using the open-source version for the scans."
"Presently, my company uses an open-source version of the solution. The solution's pricing can be considered quite reasonable owing to the features they offer."
"Snyk is a premium-priced product, so it's kind of expensive. The big con that I find frustrating is when a company charges extra for single sign-on (SSO) into their SaaS app. Snyk is one of the few that I'm willing to pay that add-on charge, but generally I disqualify products that charge an extra fee to do integrated authentication to our identity provider, like Okta or some other SSO. That is a big negative. We had to pay extra for that. That little annoyance aside, it is expensive. You get a lot out of it, but you're paying for that premium."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the pricing a three. It is a cheap solution."
"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."
"Despite Snyk's coverage, scalability, reliability, and stability, it is available at a very competitive price."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
909,563 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
16%
Construction Company
14%
Healthcare Company
12%
Financial Services Firm
10%
Financial Services Firm
13%
Manufacturing Company
10%
Computer Software Company
8%
Comms Service Provider
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business1
Large Enterprise6
By reviewers
Company SizeCount
Small Business20
Midsize Enterprise10
Large Enterprise24
 

Questions from the Community

What needs improvement with SAP BusinessObjects GRC?
Regarding automation, they could enhance features for checking real-time data when someone attempts to access data without proper permissions. Currently, we do not receive immediate alerts; we only...
What is your primary use case for SAP BusinessObjects GRC?
I work with SAP, and currently I am working with other domains such as Power BI, Microsoft, and in the AI sector. When working with Microsoft, I utilize solutions such as Intune, Configuration Mana...
What advice do you have for others considering SAP BusinessObjects GRC?
The overall rating for SAP BusinessObjects GRC is 8.5 out of 10. I would rate GRC solutions at eight. Nothing is perfect; if someone attempts to hack, they can create issues. The method and process...
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
What is your primary use case for Snyk?
I use Snyk ( /products/snyk-reviews ) in the DevOps pipeline to identify vulnerabilities before deploying the application. It integrates with Jenkins ( /products/jenkins-reviews ).
 

Also Known As

BusinessObjects GRC
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

INEOS Melamines GmbH, Banco Galicia
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about SAP BusinessObjects GRC vs. Snyk and other solutions. Updated: August 2026.
909,563 professionals have used our research since 2012.