Snyk
Scans your dependencies (SCA), source code (SAST), infrastructure-as-code and containers for known vulnerabilities, with IDE, CLI and Git integrations.
Free tier
- Free plan for individual developers and small teams
- Test limits: 200 Open Source, 100 Code, 300 IaC and 100 Container tests
Paid plans: Team: $25/month
Best for
Catching vulnerable npm packages that an AI assistant pulled in.
Watch out: Free-plan tests are capped per product, so scan on pull requests rather than on every save.
Sources
Checked on 2026-11-11. Vendors change pricing often, so confirm on the official page before you commit.