diff --git a/.snyk b/.snyk
new file mode 100644
index 0000000..1a54bdc
--- /dev/null
+++ b/.snyk
@@ -0,0 +1,10 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - lodash:
+        patched: '2020-05-01T00:42:50.317Z'
+    - knex > lodash:
+        patched: '2020-05-01T00:42:50.317Z'
diff --git a/package.json b/package.json
index cdf719c..be8d0af 100644
--- a/package.json
+++ b/package.json
@@ -8,7 +8,9 @@
   "private": true,
   "scripts": {
     "build": "tsc && truffle compile",
-    "test": "npm run build && node run-tests.js"
+    "test": "npm run build && node run-tests.js",
+    "snyk-protect": "snyk protect",
+    "prepare": "yarn run snyk-protect"
   },
   "dependencies": {
     "ajv": "^6.0.0",
@@ -23,7 +25,8 @@
     "request": "^2.83.0",
     "truffle-contract": "^3.0.1",
     "tslib": "^1.8.1",
-    "web3": "0.20.3"
+    "web3": "0.20.3",
+    "snyk": "^1.316.1"
   },
   "devDependencies": {
     "@types/bignumber.js": "4.0.2",
@@ -39,5 +42,6 @@
     "typescript": "^2.6.2",
     "typescript-logging": "^0.5.0",
     "web3-typed": "https://github.com/Softmotions/web3-typed.git"
-  }
+  },
+  "snyk": true
 }