Skip to content
ShipSecurelySecurity reference
Menu

13 tools · 88 fixes · 22 incidents tracked · Updated Oct 13, 2026 · Sources: Supabase, GitHub, OWASP, Stripe + 9

Comparisons

Code scanners

These tools look at your own code or a connected repository. Prices below are the figures on the vendor pages linked from each tool.

Last updated

Scanner comparison. Rows are alphabetical, not ranked.
ToolPriceWhat it catchesWho it suits
AikidoDeveloper plan listed at $0, free forever, for 2 users, with no credit card. The included usage on that page is 10 repos plus fair-usage limits.The free feature list includes SAST, dependency scanning, secrets detection, and cloud checks.A small team that wants code, dependency, and secret findings in one hosted product.
GitHub code scanningCode scanning and the CodeQL CLI are free for public repositories by default. Private repositories need GitHub Code Security. No public per-committer price is stated.Insecure patterns in repository code, using CodeQL on the languages that product covers.A public GitHub repository. A private repository needs the paid Code Security product.
SemgrepFree for up to 10 contributors, with a maximum of 10 private repositories and unlimited public repositories. Code and Supply Chain are listed at $0. Secrets detection is priced on Teams at $15 per contributor per month and is not in the free plan's included products.Pattern-based code scanning and supply-chain findings on the free edition. The community CLI only analyzes inside a single function or file.A small team that wants a free hosted tier or a local CLI, and can read the pricing page before counting on secrets scanning.
SnykFree plan at $0 per month for individuals and small teams, with SCA, SAST, IaC, and container scanning. Team is listed at $25 per month. The numeric free-plan test limit is not stated on the plans page.Dependencies, code, containers, and infrastructure-as-code from an IDE, CLI, or git host.An individual or small team. Snyk Evo features such as AI pentesting are not on Free or Team.

Sources

Each cell is a shorter restatement of that tool's page on this site. The tool page lists the public URL that was checked and anything still unknown.