NOTE · 29 SEP 2026
What AI code security tools cost: published prices compared
ANSWER FIRST
Four of the nine tools we score publish prices: Aikido Security, Semgrep, Snyk and GitHub Advanced Security. Only Semgrep and GitHub publish a per-unit price that can be multiplied out for any team size; Aikido publishes flat plans with 10 users included and Snyk a Team starting price for up to 10 developers. The other five ask buyers to contact sales.
Editorial assessment · Compiled from vendor product, docs, pricing and marketplace pages · Rated October 2026
By Best AI Code Security reviewers · Published 29 September 2026
This note works through the prices vendors publish on their own pages, as reviewed in September 2026, and turns them into monthly figures for three team sizes. It uses list prices only; taxes, discounts, minimums and negotiated terms are not included. The calculator does the same arithmetic for any team size and re-ranks the tools with your own weights.
Who publishes what?
| Vendor | Free tier | Lowest published paid option | Pricing unit |
|---|---|---|---|
| Legit Security | Not published | Contact sales | Not published |
| Endor Labs | Yes: Developer tier, local, no account | Contact sales | Contributors with commits in the last 90 days |
| Snyk | Yes: Free, $0 | Team from $25 a month (up to 10 developers) | Enterprise credits (1 credit = $1) |
| Cycode | No (free trial offered) | Contact sales | Active developers and AI usage |
| Semgrep | Yes: up to 10 contributors | $30 per contributor per month (Code or Supply Chain); $15 (Secrets) | Contributor |
| OX Security | "Start Free" sign-up, limits not published | Contact sales | AI user, contributing developer, cloud asset, agent hours |
| Aikido Security | Yes: 2 users | $300 a month, 10 users included | Flat fee per plan |
| Apiiro | No (AutoFix free for open source maintainers) | Contact sales | Not published |
| GitHub Advanced Security | Free for public repositories (code scanning, secret scanning, Dependabot alerts) | $19 (Secret Protection) or $30 (Code Security) per active committer per month | Active committer |
What does a team pay at list price?
The table multiplies the published per-unit prices by the number of developers, and uses the flat plan price where the plan includes that many users. Where a price for that team size is not published, the cell says so.
| Plan | 10 developers | 25 developers | 100 developers |
|---|---|---|---|
| Semgrep: Teams: Code | $300 a month | $750 a month | $3,000 a month |
| Semgrep: Teams: Code, Supply Chain and Secrets | $750 a month | $1,875 a month | $7,500 a month |
| GitHub Advanced Security: GitHub Code Security | $300 a month | $750 a month | $3,000 a month |
| GitHub Advanced Security: Code Security and Secret Protection | $490 a month | $1,225 a month | $4,900 a month |
| Aikido Security: Basic | $300 a month | Not published above 10 users | Not published above 10 users |
| Aikido Security: Pro | $600 a month | Not published above 10 users | Not published above 10 users |
Semgrep Teams (Code) and GitHub Code Security carry the same $30 unit price, so they cost the same at every team size. The difference is what the unit counts, contributors for Semgrep and active committers for GitHub, and what each plan includes. Aikido's flat plans keep the cost fixed for up to 10 users; the price for more users is not on the pricing page we reviewed.
What does each price include?
- Semgrep: Teams is sold per product, with Code or Supply Chain at $30 per contributor per month and Secrets at $15. The free plan covers up to 10 contributors and 10 private repositories, with 60 AI credits. Semgrep Guardian, the plugin for coding agents, has no price on its product page.
Source: Semgrep: pricing · Reviewed Sep 2026
- GitHub Advanced Security: GitHub Secret Protection ($19) covers secret scanning, push protection, AI-detected secrets and custom patterns; GitHub Code Security ($30) covers code scanning, the CodeQL CLI, Copilot Autofix, dependency review and security overview. Both are for GitHub Team and GitHub Enterprise Cloud.
Source: GitHub Docs: about GitHub Advanced Security · Reviewed Sep 2026
- Aikido Security: the free Developer plan (2 users) includes SCA, SAST, AI SAST, secrets and 10 AI AutoFixes a month; Basic adds PR Security Review; Pro adds malware detection. Annual billing takes 10% off.
Source: Aikido Security: pricing · Reviewed Sep 2026
- Snyk: the Free plan includes 100 Snyk Code tests a month, 5 projects and SCA, SAST, IaC and container scanning; Team starts at $25 a month for up to 10 developers with 1,000 tests; Enterprise uses credits at 1 credit = $1. The Evo coding agent security features require an Enterprise Platform Subscription.
Source: Snyk: plans · Reviewed Sep 2026
What do the other five publish?
Legit Security and Apiiro publish no prices and no pricing unit. Endor Labs publishes its plan names (Developer, Core and Pro) and its seat definition, contributors with commits in the last 90 days. Cycode names its tiers and says pricing is based on active developer count and AI usage. OX Security publishes a unit for each product: per AI user for OX VibeSec, per contributing developer for OX Code, per cloud asset for OX Cloud and per agent hour for the Agentic Pentester. For these vendors, our lesson on pricing units lists the numbers to send before the first call.
Does a published price mean a better tool?
No. Pricing transparency is one of seven criteria and carries 10% of our score. It measures whether a buyer can model cost from public pages, not whether a tool is cheap or good value. Aikido Security leads on pricing transparency at 5.0, while the top of our overall ranking is Legit Security at 4.3, with 1.0 on pricing transparency. Buyers who want price visibility to count for more can raise that weight in the calculator.
What to check before comparing quotes
- Count committers or contributors over the last 90 days, the window several vendors use.
- List the products you need: code scanning, dependencies, secrets and agent controls.
- Ask whether the agent controls are in the plan you are pricing.
- Ask how commits by bots and coding agents are counted.
- Compare monthly and annual prices, and ask about minimums.
Sources
- GitHub Docs: about GitHub Advanced Security docs.github.com
- Semgrep: Guardian semgrep.dev
- Legit Security: pricing legitsecurity.com
- Endor Labs: pricing endorlabs.com
- Snyk: pricing snyk.io
- Cycode: pricing cycode.com
- Semgrep: pricing semgrep.dev
- OX Security: pricing ox.security
- Aikido Security: pricing aikido.dev
- Apiiro: pricing apiiro.com
- GitHub Advanced Security: pricing github.com