{
  "id": "tool:snyk",
  "_kind": "Tool",
  "_file": "domain/tools/tools-saas-missing.yaml",
  "_cluster": "domain",
  "attributes": {
    "displayName": "Snyk",
    "homepageUrl": "https://snyk.io",
    "kind": "other",
    "description": "Developer security platform for finding and fixing vulnerabilities.\nScans open-source dependencies, container images, IaC configurations,\nand source code for security issues in CI/CD pipelines.\n"
  },
  "outgoingEdges": [
    {
      "from": "tool:snyk",
      "to": "skill-area:application-security",
      "kind": "tool_used_by",
      "attributes": {}
    },
    {
      "from": "tool:snyk",
      "to": "skill-area:application-security",
      "kind": "used_for"
    },
    {
      "from": "tool:snyk",
      "to": "tool:sonarqube",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Code security — Snyk focuses on dependencies and containers; SonarQube on source code quality"
      }
    },
    {
      "from": "tool:snyk",
      "to": "tool:trivy",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — Snyk is a commercial platform; Trivy is open-source CLI"
      }
    },
    {
      "from": "tool:snyk",
      "to": "tool:checkov",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — Snyk is a commercial platform; Checkov is open-source IaC-focused"
      }
    },
    {
      "from": "tool:snyk",
      "to": "tool:tfsec",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning tools"
      }
    },
    {
      "from": "tool:snyk",
      "to": "tool:owasp-zap",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — Snyk is SCA and code scanning; OWASP ZAP is DAST for web apps"
      }
    }
  ],
  "incomingEdges": [
    {
      "from": "specialization:security-compliance",
      "to": "tool:snyk",
      "kind": "uses_tool"
    },
    {
      "from": "specialization:security-research",
      "to": "tool:snyk",
      "kind": "uses_tool"
    },
    {
      "from": "stack-profile:security-operations",
      "to": "tool:snyk",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:container-registry-scanning",
      "to": "tool:snyk",
      "kind": "composed_of"
    },
    {
      "from": "stack-profile:vulnerability-management-platform",
      "to": "tool:snyk",
      "kind": "composed_of"
    },
    {
      "from": "tool:sonarqube",
      "to": "tool:snyk",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Code security — SonarQube scans source code quality; Snyk focuses on dependencies and containers"
      }
    },
    {
      "from": "tool:trivy",
      "to": "tool:snyk",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — Trivy is open-source CLI; Snyk is a commercial platform"
      }
    },
    {
      "from": "tool:checkov",
      "to": "tool:snyk",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — Checkov is open-source IaC-focused; Snyk is a commercial platform"
      }
    },
    {
      "from": "tool:tfsec",
      "to": "tool:snyk",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning tools"
      }
    },
    {
      "from": "tool:owasp-zap",
      "to": "tool:snyk",
      "kind": "alternative_to",
      "attributes": {
        "comparison": "Security scanning — OWASP ZAP is DAST for web apps; Snyk is SCA and code scanning"
      }
    },
    {
      "from": "tool-server:mcp-snyk",
      "to": "tool:snyk",
      "kind": "integrates_with",
      "attributes": {}
    }
  ]
}