diff --git a/apps/www/app/api-v2/ticket-og/route.tsx b/apps/www/app/api-v2/ticket-og/route.tsx
index d3f62abbd6a..f7172d1464e 100644
--- a/apps/www/app/api-v2/ticket-og/route.tsx
+++ b/apps/www/app/api-v2/ticket-og/route.tsx
@@ -27,7 +27,6 @@ const LW_MATERIALIZED_VIEW = 'tickets_view'
 export async function GET(req: Request) {
   const url = new URL(req.url)
 
-  // Just here to silence snyk false positives
   // Verify that req.url is from an allowed domain
   const username = url.searchParams.get('username') ?? url.searchParams.get('amp;username')
   const userAgent = req.headers.get('user-agent')
diff --git a/apps/www/pages/security.mdx b/apps/www/pages/security.mdx
index 3192ebfa4c6..1908c5f8e63 100644
--- a/apps/www/pages/security.mdx
+++ b/apps/www/pages/security.mdx
@@ -194,7 +194,7 @@ Read more about [fine-grained access controls](/docs/guides/platform/access-cont
 
 Supabase works with industry experts to conduct regular penetration tests.
 
-In addition to internal security reviews, we use various tools to scan our code for vulnerabilities including [GitHub](https://github.com), [Vanta](https://www.vanta.com/), and [Snyk](https://snyk.io/).
+In addition to internal security reviews, we use various tools to scan our code for vulnerabilities including [GitHub](https://github.com), [Vanta](https://www.vanta.com/), and [DepthFirst](https://depthfirst.com/).
 
 </Section>
 
diff --git a/supa-mdx-lint/Rule003Spelling.toml b/supa-mdx-lint/Rule003Spelling.toml
index 96390b1d785..6bd06da8c4b 100644
--- a/supa-mdx-lint/Rule003Spelling.toml
+++ b/supa-mdx-lint/Rule003Spelling.toml
@@ -217,6 +217,7 @@ allow_list = [
     "Datadog",
     "Deadpool",
     "Dependabot",
+    "DepthFirst"
     "DDoS",
     "Deno",
     "Dependabot",