Buying and running it · Lesson 9 of 10
AI code security pricing: units, tiers and what to ask
ANSWER FIRST
Vendors in this category price by different units: contributors, active committers, AI users, cloud assets, agent hours or a flat plan. Of the nine tools we score, Aikido Security, Semgrep, Snyk and GitHub Advanced Security publish prices; the rest publish a unit, tier names or nothing. Knowing the unit tells you what to count before a sales call.
Editorial assessment · Compiled from vendor product, docs, pricing and marketplace pages · Rated October 2026
By Best AI Code Security reviewers · 29 September 2026 · 3 min read
Which pricing units do vendors use?
- Contributor or contributing developer. Semgrep prices Teams at $30 a month per contributor for Code or Supply Chain and $15 for Secrets. Endor Labs counts contributors with commits in the last 90 days, and OX Security defines a developer as someone who committed in the past 90 days.
Source: Semgrep: pricing · Reviewed Sep 2026
Source: Endor Labs: pricing · Reviewed Sep 2026
Source: OX Security: pricing · Reviewed Sep 2026
- Active committer. GitHub prices GitHub Secret Protection at $19 and GitHub Code Security at $30 per active committer per month.
Source: GitHub Advanced Security · Reviewed Sep 2026
- Flat plan with users included. Aikido Security publishes Basic at $300 a month and Pro at $600 a month, each with 10 users included, and a free Developer plan for 2 users.
Source: Aikido Security: pricing · Reviewed Sep 2026
- AI user, cloud asset and agent hours. OX Security prices OX VibeSec by AI user, OX Code by contributing developer, OX Cloud by cloud asset and the Agentic Pentester by agent hours.
Source: OX Security: pricing · Reviewed Sep 2026
- Developer count and AI usage. Cycode says pricing is based on active developer count and AI usage, without figures.
Source: Cycode: pricing · Reviewed Sep 2026
- Credits. Snyk publishes a Free plan and a Team plan starting at $25 a month for up to 10 developers; its Enterprise plan is credit based, at 1 credit = $1.
Source: Snyk: plans · Reviewed Sep 2026
What does each unit count?
A contributor or committer count is usually a count of people who committed code in a recent window, not a count of named seats. That has two effects for teams using coding agents. Occasional committers count, so the number can be higher than the team you had in mind. And commits made by an agent or a bot account may or may not count: the pricing pages we reviewed do not say, so ask.
An AI user unit counts the people who use AI assistants, which may be most of engineering. Agent hours count usage, so the cost moves with how often the product runs.
What if no price is published?
Legit Security and Apiiro publish no prices and no pricing unit on the pages we reviewed; Endor Labs, Cycode and OX Security publish units or tier names without figures. In those cases, send every vendor the same four numbers: committers in the last 90 days, repositories, developers using AI assistants, and the assistants in use. Ask which plan includes the agent controls, because in some products they sit in a higher tier; Snyk's coding agent security, for example, requires an Enterprise subscription.
How does pricing affect our scores?
Pricing transparency carries 10% of our score. A published price scores highest, a published unit scores partially and 'Contact sales' scores lowest.
On pricing transparency, Aikido Security leads at 5.0, and Legit Security and Apiiro score 1.0. The calculator multiplies out the published prices for your team size.