Blew $600 on Snyk licenses for a 3 person team, we were running 4 scans total
Bought a year of Snyk for our tiny startup back in March because every blog post said you need a paid SCA tool or you're basically hacked already, and we burned $600 to scan 4 repos that a free GitHub Action handled just fine. Turns out our real problem was 30 hardcoded API keys in old commits, which Snyk didn't even flag, but gitleaks found in like 10 seconds for free. Anyone else way overpay for a scanner before realizing the holes were somewhere else entirely?