Skip to main content

Launching a Free-Tier Version of our Container Vulnerability Management Solution

Written by

Liron Lifshitz-Yadin

October 10, 2018

0 mins read

Today we’re delighted to share that we’re launching a free-tier version of our Container Vulnerability Management solution, in general availability.

Our Container Vulnerability Management solution enables developers to test, fix  and monitor open source vulnerabilities in their Docker container images.

Snyk, as always, is grateful and committed to the community, and it is our priority to make sure our new offerings are available to all developers and security experts.

he free version will include up to 100 tests per month for scanning Docker images.

With this new version launch, we’re also adding even more actionable remediation advice for fixing vulnerabilities in your Docker images. Our remediation advice will now recommend upgrades for vulnerable libraries as well as advise which Docker base image you should move to in order to be more secure.

Replacing the Docker base image may eliminate many vulnerabilities at once, thus allowing developers to easily focus on quickly fixing vulnerabilities which were introduced by other layers in their Docker files.

An additional recommendations section will now appear in case your base image can be upgraded:

Terminal output recommending an upgrade from node:8.1 to node:8.2 to reduce base image vulnerabilities, with 12 remaining vulnerabilities listed.

For more information on our Container Vulnerability Management solution and instructions for getting started, visit our previous blog post, and read our Documentation. There’s much more to come to help you fix your vulnerable containers, so stay tuned!

Get started in capture the flag

Learn how to solve capture the flag challenges by watching our virtual 101 workshop on demand.

Read more

feature customer snowflake
Article

Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code

Snyk Studio integrates with Snowflake Cortex Code to scan AI-generated code, dependencies, and containers for vulnerabilities during development.

blog feature pypi spoof
Article

The full Snyk AI Security Platform, free for open source maintainers

Open source maintainers are drowning in real vulnerability reports and need help prioritizing, fixing, and shipping remediation faster. Snyk’s Secure Developer Program gives qualifying projects free access to the Snyk AI Security Platform.

feature insights announcement
Blog

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

A new npm worm is abusing binding.gyp to trigger node-gyp during install, letting malicious packages run code without lifecycle scripts. It steals credentials, persists in GitHub, and self-propagates across maintainers.