How Snowflake uses Snyk to give data-driven analytics for security
summary
Snowflake shows concrete results: it ingests Snyk SCA and vulnerability telemetry into a curated AppSec store, wires fixes into CI/CD (auto-PRs for many low-severity issues), and uses risk-based prioritization (Snyk Insights plus acquisitions like Enzo) to reduce backlog. Developers get just-in-time training and feedback in IDEs, PRs and pipelines while a curated AppSec data lake and graph of threat models spot unexpected attack paths. Operational policy enforces a one-to-seven security partner ratio and ownership of patched images.
AI-written summary · about
chapters (5)
- 0:00Introduction to developer security
- 3:39The evolving AppSec landscape
- 9:48Snyk's platform and approach
- 16:41Snowflake implementation
- 17:53Scaling security through engineering
related talks
31mAdvancing security analytics with Snowflake and AWS at Snyk (PRT329)
50mA data driven approach to application security
57mDev-first security: From code to cloud, and back to code (PRT291)
31mFrom Noise to Notes: Orchestrating SAST with Developers... (Adrián Puente Z.)
41mFrom Snowflake to Snowstorm:Navigating Breaches and Detections
42mThreat Detection across all environments with SnowflakeData Security Lake
10mGuy Podjarny, Snyk | Node Summit 2017
04mContinuous Integration, Continuous Delivery. Continuous Security?