S 
Snyk
Survived because the product is a curated database, not a prompt.
NOT REALLY
why this verdict
Keep paying — Microsoft has not replaced it
Microsoft's version overlaps, but does not finish the security job, so this one still earns its $25/mo.
- A named launch, not a vibe named, unlinked
- AI can explain a CVE but cannot maintain the vulnerability database. Microsoft, April 4, 2025 — no announcement link recorded yet.
- How much of the job it covers not the job editorial call
- Parts of it. The job still needs the tool to get finished.
- Is there a free way to do it? yes
- 2 of 2 listed replacements have a usable free tier: GitHub Dependabot and OWASP Dependency-Check.
- What the call is worth $300/yr
- $25/mo at the entry paid tier — $300 a year per seat.
Reason composed from the fields above missing: announcement linked recorded: free replacement listed recorded: two or more escape hatches
- Threatened by
- Microsoft
- Since
- April 4, 2025
- List price
- $25/mo
- Per year
- $300
The backstory
Snyk finds vulnerable dependencies and tells you which upgrade fixes them. A model can explain what a CVE means, and can even write the patch — but the value is the continuously curated advisory database, the reachability analysis, and the licence compliance reporting your legal team signs off on. That is data and process work, and it survived intact.
Escape hatches
G 
GitHub Dependabot Free dependency alerts and upgrade PRs.
github.com open_in_new O 
OWASP Dependency-Check Free open-source scanner.
owasp.org open_in_new2 of 2 replacements have a usable free tier.