Snyk

SCA and SAST developer security

Free tier + paidCode review, testing & securitysnyk.io

What it is

Developer security platform spanning Snyk Open Source for dependency SCA, Snyk Code for SAST, plus IaC and container scanning. It opens fix pull requests that bump vulnerable transitive dependencies to patched versions, and scans from the IDE, CLI and CI. Billing is per contributing developer, not per repository.

Why it earns a slot

AI agents install whatever package name sounds plausible, including abandoned and vulnerable ones. Snyk names the exact vulnerable transitive dependency and opens the upgrade pull request for you.

Know before you commit

Billing counts contributing developers across every connected repo, so cost climbs with contributor count even when only one project is scanned, and free-tier test caps are low.

Getting started

npm install -g snyk && snyk test

Field notes

0 from the community

Loading notes…

Field check

Unverified

Pricing snapshot

Free $0 with capped monthly tests; Team $25/mo per contributing developer; Ignite $1,260/yr per contributing developer; Enterprise custom; separate free program for open-source maintainers

Snapshots move fast — verify at checkout, and post a field note if it changed.

Drop into your Lovable chat

Evaluate Snyk (https://snyk.io) for this project, then use it only if it fits what we are already building.
Context: SCA and SAST developer security. Developer security platform spanning Snyk Open Source for dependency SCA, Snyk Code for SAST, plus IaC and container scanning. It opens fix pull requests that bump vulnerable transitive dependencies to patched versions, and scans from the IDE, CLI and CI. Billing is per contributing developer, not per repository.
Reviewer notes (general, not written for this codebase): AI agents install whatever package name sounds plausible, including abandoned and vulnerable ones. Snyk names the exact vulnerable transitive dependency and opens the upgrade pull request for you.
Watch out for: Billing counts contributing developers across every connected repo, so cost climbs with contributor count even when only one project is scanned, and free-tier test caps are low.
Pricing: Free $0 with capped monthly tests; Team $25/mo per contributing developer; Ignite $1,260/yr per contributing developer; Enterprise custom; separate free program for open-source maintainers
Setup: npm install -g snyk && snyk test
Rules: treat the notes above as background only. Do not assume a theme, style, layout or feature that is not already in this project — inspect the existing code first and ask me before changing visual direction.

/api/public/tools/snyk

Also in Code review, testing & security

Aikido Security

aikido.dev

All-in-one AppSec scanner

Free tier + paidCode review, testing & security

Developer free forever: 2 users, 10 repos, 2 container images, 1 domain, 250k protected requests/mo, 10 AI autofixes/mo; Basic $300/mo base for 10 users and 100 repos; Pro $600/mo for 200 repos; Advanced $600/mo for 500 repos; Enterprise custom

Open dossier

Arcjet

arcjet.com

In-app rate limiting and bot defence

PaidCode review, testing & security

No free plan as of 2026; Individual $25/app/mo; Startup $299/app/mo; Growth $799/app/mo; usage fees on top at $5 per 1M requests plus per-feature rates such as $0.50 per 1M for bot detection; 15-day trial

Open dossier

Bito

bito.ai

AI PR review agent

PaidCode review, testing & security

Team $12/seat/mo annually or $15 monthly; Professional $20/seat/mo annually or $25 monthly; both include 5,000 lines reviewed per seat per month, overage $5 per 1,000 lines; Enterprise custom; 14-day trial

Open dossier

Browserbase

browserbase.com

Hosted headless browser cloud

Free tier + paidCode review, testing & security

Free: 1 browser hour/mo; Developer $20/mo with 100 browser hours then $0.12/hr; Startup $99/mo with 500 hours then $0.10/hr; Scale custom with 250+ concurrent browsers

Open dossier