Snyk

Included quota

Free ($0): all 5 core products (SCA/SAST/Container/IaC/Cloud), unlimited contributing developers, unlimited tests on public/OSS repos, ~200 SCA / 100 SAST / 300 IaC / 100 Container private-repo tests per month, IDE/CLI/SCM integrations; NO Jira integration or automated fix PRs. Team ($25/dev/mo): unlimited tests, Jira integration, automated fix PRs, license compliance, 'Reachability' (paid-only), 24x5 support, up to 10 licenses. Ignite (~$1,260/dev/yr): Enterprise-grade platform for up to 50 devs. Enterprise (custom): unlimited tests (custom quote), SSO, RBAC, custom user roles, security-policy management, rich API, reports, on-prem container registries + self-hosted SCM (GitHub Enterprise Server / Bitbucket DC / GitLab Enterprise / Azure DevOps Server), priority support, data residency (US/EU/AUS), FedRAMP (extra).

What is public

Snyk (snyk.io - developer-security / AppSec platform: Snyk Open Source (SCA), Snyk Code (SAST), Snyk Container, Snyk IaC, Snyk Cloud, plus AI/API/web security) publishes real pricing. Free ($0): all core products, UNLIMITED scans on public/open-source repos, but capped private-repo tests (~200 SCA / 100 SAST / 300 IaC / 100 Container per month), unlimited contributing developers, no Jira integration or automated fix PRs. Team ($25/contributing-developer/mo, ~8% off annual): unlimited tests + collaboration (Jira, automated fix PRs, license compliance) - but REQUIRES 5+ devs and is CAPPED at 10 licenses/org. Ignite (~$1,260/dev/year): the 11-50-developer mid-tier. Enterprise (custom): SSO, RBAC, custom policies, SLAs, self-hosted SCM, FedRAMP (extra). A 'contributing developer' = someone who committed to a monitored PRIVATE repo in the last 90 days (public/OSS commits don't count).

Billing mechanics

Per-contributing-developer pricing, scoped by which products you buy (products are purchased separately and must all sit in the same plan). Free is test-limited on private repos (a 'test' = one scan of one manifest/image/IaC template) but unlimited on public/OSS. Team ($25/dev/mo) removes test limits but caps at 10 licenses; 11-50 devs move to Ignite (~$1,260/dev/yr, roughly 4x the Team per-dev rate); 50+ devs negotiate Enterprise. Snyk has signaled a shift toward a usage/credit-consumption model (a unified credit pool deducted as you scan) - not independently confirmed this pass; the published per-developer/test-based model remains in effect per 2026 sources.

Variable cost rationale

Scales with contributing-developer count x number of products purchased; on Free, exposure is test-volume (private-repo scans).

Additional watchouts

Pricing is famously confusing (per-contributor + per-product + test limits + opaque Enterprise) and prone to 'sticker shock' at the Team-to-Ignite-to-Enterprise transitions; budget for multi-product bundles; engage Enterprise sales BEFORE the 10-license cap if growing past ~30 devs

Overage / add-ons

Free is hard-capped on private-repo tests (exceed and scans stop until the monthly reset or you upgrade). Team caps at 10 licenses - the 11th developer forces Ignite or Enterprise. Enterprise developer-count overages typically bill ~$50-$120 per extra developer/month (often above the negotiated base) or require a contract amendment.

Sales call required

Mixed (some tiers require a call)

Commercial notes

Category leader in developer-first security (SCA/SAST/container/IaC/cloud + AI code security); Snyk-commissioned Forrester study claims 288% ROI / 6-month payback (vendor-commissioned - contextualize); customer case studies cite fast fix-time reductions (e.g., Komatsu 62%); competes with Checkmarx, Veracode, GitHub Advanced Security, Semgrep, SonarQube, Mend, Qualys

Key ambiguities

Official self-serve Team is $25/dev/mo, but Vendr/third-party 'list' benchmarks cite $52-$98/dev/mo for multi-product bundles - the gap is product-bundle/term dependent; Enterprise is fully custom (Vendr: ~$697-$948/dev/yr at 50+ devs, with 20-45% multi-year discounts). Note: Snyk has signaled a future 'credit-consumption' pricing model but it is not independently confirmed as live.

Cancellation / refund

Free (no card, permanent); Team self-serve monthly or annual (12-for-11, ~8% off; 5-dev minimum, 10-license cap); Ignite/Enterprise annual by default (multi-year 20-45% discounts); Enterprise via sales

Support SLA / resale

Community/docs (Free); 24x5 support (Team); Enterprise adds priority support, dedicated CS, SLAs, SSO/RBAC, self-hosted SCM, data residency (US/EU/AUS); broad IDE/CLI/SCM/CI integrations; DeepCode AI engine; CVE DB updated within ~24h of new disclosures

Missing data

Enterprise is custom (Vendr benchmarks ~$697-$948/dev/yr at 50+ devs, with 20-45% multi-year discounts); some 'list' benchmarks ($52-$98/dev/mo) reflect multi-product bundles rather than the $25/dev self-serve Team rate. Snyk has signaled a future usage/credit-consumption model, but it is not independently confirmed as live; the published per-developer/test pricing remains current.