Snyk
Snyk earns its place on the free tier for any small team that ships open-source dependencies and containers: the scanner lives in the IDE and the pull request, and the fix-PR workflow is what gets findings closed rather than filed. The commercial cliff is steep — Team is a flat self-serve plan that stops at ten developers, and everything above that, including every AI-branded Evo feature, is a credit-based enterprise contract priced per contributor per day.
Pros
- Free tier includes code, dependency, container and IaC scanning with IDE and CLI integrations
- Fix pull requests close findings instead of listing them
- Published rate card makes enterprise credits legible: 1 credit = $1 per contributor per day for Code or Open Source
- Founded 2015, with a decade of vulnerability data behind the scanner
Cons
- Free Code scanning is capped at 100 tests a month, which a busy repository exhausts quickly
- Team stops at 10 developers and shows no annual price
- All Evo AI capabilities require an Enterprise subscription
- Enterprise credits are prepaid for the contract term and overage is invoiced in arrears