Snyk Acquires Fugue, Enters Cloud Security Market

Note: Snyk IaC offer pre-deployment IaC security that has been enhanced with security rulesets mapped to compliance frameworks. For more details on our IaC scanning capabilities please visit the IaC Product page or the IaC Docs.

Extends Snyk Developer Security Platform by Enabling Developer First Cloud Security Posture Management

BOSTON - February 17, 2022 - Snyk, the leader in developer security, today announced its acquisition of Fugue, a cloud security and compliance company helping global teams to protect their cloud environments so they can prioritize rapid innovation. This milestone marks Snyk's entry into the cloud security market, a fast growing segment of cybersecurity predicted to be worth $77.5 billion by 2026 according to MarketsandMarkets.

Headquartered in Frederick, Maryland, Fugue, like Snyk, was founded with a fundamental commitment to the power of open source for increasingly scalable and secure software development. While numerous Cloud Security Posture Management (CSPM) tools today can detect vulnerabilities in deployment, Fugue's Unified Policy Engine is unique in its ability to connect cloud posture back to configuration code, using one set of policies in order to manage compliance and security throughout the entirety of the software development lifecycle (SDLC).

By joining forces with Snyk, Fugue's current capabilities will soon extend the Snyk Developer Security Platform, enabling the industry's first CSPM designed by and for developers. Snyk customers will be the first to benefit from an unmatched feedback loop, allowing developers to secure their code before deployment, maintain its secure integrity while running, and better understand the precise places to provide fixes back in the code. The newly combined Snyk and Fugue teams are fully aligned in this shared vision to support more of the world's modern global DevOps shops.

In these forward thinking enterprises, where the promise of DevSecOps is embraced and championed throughout the entire organization, each developer's role has additionally evolved to now include the continued security of applications after they are deployed. More and more of the world's developers, which IDC predicts to number over 43 million by 2025, find themselves fully responsible for the ongoing performance and security of their code once it's running. 

In the near-term, a new Snyk solution will unite and then extend Snyk's Infrastructure as Code (IaC) and Fugue's cloud security capabilities, designed specifically with these DevSecOps teams in mind. This will include:

• Developer First CSPM: effective detection of security vulnerabilities in modern cloud workloads; automated into developer workflows enabling an efficient process for capturing and testing issues early.

• Comprehensive Visualization of Cloud Landscape: interprets cloud resources, showing details as well as connections/relationships with other resources to provide the context that enables effective risk assessment, triaging and prioritization.

• Fully Integrated Insights: security insights in deployed app are connected to developer security workflows, enabling improved vulnerability prioritization based on exploitability. This lowers signal to noise ratio by highlighting biggest risks while deprioritizing issues with a mitigation already in place.  

"Welcoming the talented Fugue team as our newest Snykers is a fantastic way to kick off 2022," said Peter McKay, CEO, Snyk. "Together, we'll collectively reimagine what cloud security can and should look like for today's modern DevSecOps teams, ensuring more secure innovation can flourish worldwide."

"As we join forces with Snyk today, our founding mission - security by and for developers - doesn't change, but expands exponentially with the scope of the opportunity in front of us," said Josh Stella, Co-founder & CEO, Fugue. "We're excited to now reach more developers in more places, helping them to not only build our future, but also successfully secure it."

The acquisition of Fugue is Snyk's fifth in the last 18 months, following the successful integrations of CloudSkiff, FossID, Manifold and DeepCode. This latest corporate development follows the company's late 2021 announcement of over $600 million in Series F investment. 

Supporting Resources

• Fugue website

• Snyk Developer Security Platform

• Welcoming Fugue as we build the future of developer-first cloud security by Guy Podjarny

• Fugue Joins Snyk by Josh Stella

About Snyk

Snyk is the leader in developer security. We empower the world's developers to build secure applications and equip security teams to meet the demands of the digital world. Our developer-first approach ensures organizations can secure all of the critical components of their applications from code to cloud, leading to increased developer productivity, revenue growth, customer satisfaction, cost savings and an overall improved security posture. Snyk's Developer Security Platform automatically integrates with a developer's workflow and is purpose-built for security teams to collaborate with their development teams. Snyk is used by used by 1500+ customers worldwide today, including industry leaders such as Asurion, Google, Intuit, MongoDB, New Relic, Revolut and Salesforce.

Snyk is recognized on the Forbes Cloud 100 2021, the 2021 CNBC Disruptor 50 and was named a Visionary in the 2021 Gartner Magic Quadrant for AST.