Snyk
Verified Oct 15, 2026 ActiveDeveloper security scanning for code and dependencies
Listed on EffectHub ·
Pricing
- Pricing model
- Freemium
- Paid options from
- $25/mo
- Billing
- Monthly
Free is $0 for individuals and small teams: 5 projects and 100 Snyk Code tests a month across SCA, SAST, IaC and container scanning with IDE, CLI and source-manager integrations. Team starts at $25/month billed monthly for up to 10 developers, 100 projects and 1,000 Code tests a month, with Jira integration; the page shows no annual price and does not state the per-developer basis. Enterprise is quoted on a published credit rate card (1 credit = $1): Snyk Code and Open Source cost 1 credit per active contributor per day, IaC 0.33, containers 0.33 per monitored image per day, DAST 3 per target per day; credits are prepaid for the contract term and all Evo AI features need Enterprise.
Use tool ↗About Snyk
Snyk scans source code, open-source dependencies, container images and infrastructure-as-code for known and inferred vulnerabilities, from the IDE and CLI through pull-request checks and CI, and proposes fixes it can open as pull requests. Its model-assisted analysis ranks and explains findings to cut false positives, and the newer Evo line adds security for coding agents and AI-driven pentesting on enterprise contracts. A free tier covers individuals and small teams with capped tests, Team is a flat self-serve plan for up to ten developers, and Enterprise is metered in credits per active contributor. Snyk Limited is registered in England and Wales, headquartered in Boston and was founded in 2015.
- Platforms
- Web · API · VS Code extension · Linux
- API
- Yes
- Last verified
- Oct 15, 2026
Verified sources
- Plans page: Free $0 with 5 projects and 100 Snyk Code tests a month; Team 'Starting at $25 / month billed monthly' for up to 10 developers, 100 projects and 1,000 Code tests; Enterprise by contact on a credit rate card where 1 credit = $1 and Snyk Code or Open Source cost 1 credit per active contributor per day; Evo features Enterprise-only (15 October 2026)snyk.io ↗
- About page: founded in 2015, headquartered in Boston at 100 Summer St with offices in London, Tel Aviv and Singapore; footer reads Snyk Limited, registered in England and Wales (15 October 2026)snyk.io ↗
Is Snyk legit?
We don’t label tools safe or unsafe. Below are the records we checked ourselves, each with the date we read it.
- TLS certificate
- Issued by DigiCert Inc, valid until Dec 8, 2026Seen in our own connection to the site on Oct 15, 2026
- Last checked
- Oct 15, 2026The site answered
- On the market since
- 2015The vendor's own material, read by us
- Operated by
- Snyk Limited, United KingdomOur research, card verified Oct 15, 2026
Pros & cons of Snyk
Snyk earns its place on the free tier for any small team that ships open-source dependencies and containers: the scanner lives in the IDE and the pull request, and the fix-PR workflow is what gets findings closed rather than filed. The commercial cliff is steep — Team is a flat self-serve plan that stops at ten developers, and everything above that, including every AI-branded Evo feature, is a credit-based enterprise contract priced per contributor per day.
Pros
- Free tier includes code, dependency, container and IaC scanning with IDE and CLI integrations
- Fix pull requests close findings instead of listing them
- Published rate card makes enterprise credits legible: 1 credit = $1 per contributor per day for Code or Open Source
- Founded 2015, with a decade of vulnerability data behind the scanner
Cons
- Free Code scanning is capped at 100 tests a month, which a busy repository exhausts quickly
- Team stops at 10 developers and shows no annual price
- All Evo AI capabilities require an Enterprise subscription
- Enterprise credits are prepaid for the contract term and overage is invoiced in arrears
Best for
- Small teams that want dependency and container scanning in the pull request without a security hire
- Developers who want fixes proposed as PRs rather than a vulnerability list
- Organisations on GitHub, GitLab or Jira that need SCA, SAST and IaC from one vendor
Not for
- Teams of 11–50 developers who outgrow Team but are not ready for a credit-based enterprise contract
- Anyone expecting the AI features (Evo, coding-agent security, AI pentesting) on a self-serve plan
Watch out: Enterprise is metered per active contributor per day for each product you enable; a 50-developer team running Code plus Open Source is 100 credits a day before containers, so model the rate card before signing.
Alternatives to Snyk
Snyk head-to-head
Side-by-side fact sheets against the competitors our research or their makers name — pricing, platforms, API and both verdicts on one page.