Snyk

Connect Snyk to collect vulnerability scanning evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Snyk:

   1. Enterprise plan (recommended): log in to Snyk as an Org Admin (or Group admin) and navigate to the Organization Safeguard should read.
   2. Click Settings › Service accounts, then click Create a service account.
   3. In the Service Account name field, enter a unique name (for example Safeguard).
   4. From the Role dropdown list, select the role for the service account (Org Admin, Org Collaborator, or a custom role if your Group has one); choose the least-privileged option that can view projects and issues.
   5. Click Create. Copy the token that is displayed; you will not see it again. Then click Close and Hide.
   6. Other plans: open your personal General Account Settings (https://app.snyk.io/account/) and copy your API Token (it has your own permissions).

   Where to find the other values:

   • Organization ID (optional): Organization Settings › General shows the Organization ID.
   • Region: The Snyk region your account is hosted in; each region has its own API URL (for example SNYK-US-02 uses https://api.us.snyk.io/rest/). See Snyk's API URLs list.

   Snyk shows the secret only once, so copy it before you leave the page.

   Service accounts are available on Enterprise plans. Group viewers cannot create service accounts; an Organization service account needs a Group member who is Org Admin, or a Group admin. A Group service account with a Group-level role sees all Organizations in the Group. The fetched service-accounts page lists Org Admin, Org Collaborator and custom roles but does not describe a built-in read-only role.

   Source: docs.snyk.io, docs.snyk.io, docs.snyk.io, checked 2026-10-07.

2. On Compliance › Connectors, open Snyk, click Connect, choose API token and fill in:

   Field	What to enter
   API token	Required. A service account token with the Org Collaborator role, or a personal token. Snyk has no OAuth app here. Stored encrypted and never shown again.
   Organization ID (optional)	Leave blank to read every organization the token can see.
   Region	Optional. us, eu or au: where your Snyk tenant is hosted.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Snyk and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Vulnerability Scanning connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks