# Overview

Snyk helps you prioritize issues for fixing by distinguishing between insignificant alerts and actionable threats. Not all vulnerabilities pose the same level of danger.

Snyk uses contextual signals, such as code reachability and deployment environments, and prioritization methods, including exploit maturity, severity levels, and holistic risk scoring.

## Prioritize issues for fixing

* [Risk Score](/manage-risk/prioritize-issues-for-fixing/risk-score.md) and [Priority Score](/manage-risk/prioritize-issues-for-fixing/priority-score.md): Use Risk Score and Priority Score to rank issues for remediation. Learn how they differ in [Priority Score vs Risk Score](/manage-risk/prioritize-issues-for-fixing/priority-score-vs-risk-score.md).
* [Reachability Analysis](/manage-risk/prioritize-issues-for-fixing/reachability-analysis.md): Snyk determines whether your application's code calls specific functions or modules that contain a vulnerability. This helps you prioritize fixes based on whether the threat is executable in your environment.
* [Exploit maturity](/manage-risk/prioritize-issues-for-fixing/view-exploits.md): Track and display real-world exploits of a vulnerability, including active attacks or proof-of-concept, and prioritize fixes based on proven, active threats.
* [Malicious packages](/manage-risk/prioritize-issues-for-fixing/malicious-packages.md): Malicious dependencies are an increasingly common method for executing software supply chain attacks.
* [Severity levels](/manage-risk/prioritize-issues-for-fixing/severity-levels.md): Snyk categorizes vulnerabilities into Critical, High, Medium, or Low. These levels are based on industry-standard scoring frameworks (like CVSS and CCSS) to quickly communicate the potential impact and risk of an exploit.
* [Application Context](/developer-tools/scm-integrations/application-context-for-scm-integrations.md): Bring the application context with [Assets and risk factors](/manage-risk/prioritize-issues-for-fixing/assets-and-risk-factors.md), and [Set up Insights](/manage-risk/prioritize-issues-for-fixing/set-up-insights.md).

## Snyk Policies

Snyk [Policies](/manage-risk/policies.md) automate security and license governance. Define rules that automatically adjust issue severities or set compliance requirements across your Projects.

## Snyk Analytics

[Analytics](/manage-risk/analytics.md) provides a centralized reporting hub for Enterprise customers. Build custom dashboards and track security metrics across teams for high-level visibility into risk and remediation progress.

The [Reports tab](/manage-risk/analytics/reports-tab.md) organizes data into specific categories: **Exposure & coverage**, **Remediation**, **Prevention**, **Compliance**, and **Education**. Filter, save custom views, and export data (PDF/CSV) to facilitate conversations between security and development teams.

## Dependencies and licenses

View [dependencies](/manage-risk/dependencies-and-licenses/view-dependencies.md) and [license](/manage-risk/dependencies-and-licenses/view-licenses.md) details for all Projects in your Group or Organization by selecting the **Dependencies** option in your Group or Organization menu.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.snyk.io/manage-risk/manage-risk.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
