Snyk's Free Plan Is 200 Tests a Month. Here Is What Counts as One.

Snyk Free gives 200 Open Source tests, 100 Snyk Code tests, 300 IaC tests and 100 Container tests per month, across up to 5 projects. Scans of public repositories do not count against any of those limits, and the plan is permanent rather than a trial, with no card required.

The limit is measured in scans, so how many repositories you can protect depends on how often you scan and how many manifest files each one has.

Rohit Bhadani runs infrastructure day to day. This is the third security scanner he has evaluated for a small team, and the first where the free limit was decided before the trial ended.

Snyk is the only security tool on this site so far, which makes the comparison awkward. The closest parallel is another metered free tier whose unit is not what people assume: ChatGPT now meters file uploads rather than messages, and Rytr counts your prompt against its character allowance. The pattern is the same in all three: the number that decides your month is the one nobody puts in the headline.

What counts as a test?

A test is one scan of one target, and the target differs by product. Snyk Open Source counts each manifest file it scans, so a repository with a package.json at the root and three more inside workspaces consumes four tests on the first scan, not one.

Prices measured on 22 October 2026. Vendor plan terms, allowances and prices change without notice, so treat every figure on this page as a dated snapshot rather than a permanent fact. Where a number here differs from the vendor's own pricing page, the vendor's page is correct and the figure above is simply older than it.

The manifest-file detail is the one that surprises people. It is also the rule that makes the difference between a free plan that lasts a month and one that lasts nine days.

How fast does 200 tests actually run out?

Here is the arithmetic with a realistic monorepo. Twenty package.json files, scanned once a day by CI, spends 20 Open Source tests per run. Two runs a day for five working days is 200 tests, and the allowance is gone before the second week of the month ends.

That is not a hypothetical. A monorepo with 20 services is unremarkable at a company of ten people, and daily scheduled scans are the default recommendation in every CI guide, including Snyk's own.

What the free plan does not give you

The test cap is the visible limit. Three others matter more once you are inside a team rather than working alone.

• License compliance is not included. It arrives with the Team plan, so on Free you can see that a dependency has a license you might not want, and nothing tells you when that changes.
• Jira integration is not included. Findings have to be read in Snyk's own interface. In practice this is the limit that decides whether anyone looks at them.
• Overuse is paused, not billed. When the monthly allowance runs out, tests stop rather than continuing with an overage charge. Nothing breaks, and nothing is scanned either.

When Snyk Free is genuinely enough

If your codebase is open source, Snyk Free is effectively unlimited and the limits above do not apply to you. Public repository scans are excluded from every quota. For a maintainer working on public projects this is close to a full product at no cost, and it is the strongest argument for the plan.

For private code, the honest ceiling is one to three active repositories with scans on a schedule you set deliberately. That covers a solo developer, a contractor managing a handful of client projects, or a small team that scans before a release rather than every commit.

How to stay inside 200 tests without missing a vulnerability

Scan on change, not on schedule. A CI job that runs snyk test only when dependency files change spends a fraction of the allowance and catches the same class of problem, because new vulnerabilities in unchanged dependencies arrive through advisories that Snyk re-evaluates continuously rather than through re-scans.

Turn off duplicate CI runs on every branch. If a pull request triggers a scan and the merge to main triggers another, that is two tests for one change. Running on pull requests only, with a weekly snyk monitor for advisories, keeps a ten-repository project around 40 to 60 Open Source tests a month.

Keep private repositories private, and keep a demo or template repository public. It sounds like a small trick, and it is worth roughly a quarter of your monthly allowance.

The rest of the developer stack has its own sharp edges. Copilot Free gives 2,000 completions and 50 chats a month, Cursor Hobby publishes no quota at all, and Vercel Hobby is limited by a commercial-use licence rather than by bandwidth.

How it compares

Two hundred tests a month is a small number, and how small depends on a detail most comparisons skip: whether a test is counted per scan or per project.

Against a bundled alternative, GitHub's own security features cover dependency alerts at no cost and integrate where the code already is. They do not do the same depth of remediation advice, which is what Snyk's paid tiers actually sell.

Against a broader platform, Cloudflare handles the runtime and edge side of the same problem rather than the dependency audit. They are complementary rather than competing, and neither free tier covers the other's ground.

The honest framing is that Snyk Free is a genuine security tool with a deliberately small budget. It is enough for a periodic audit of a small project and not enough for continuous scanning across several.¹

Frequently asked questions

Does Snyk's free plan require a credit card?
No card is required to start. The Free plan is permanent rather than a trial, so there is no expiry date to work around.

What happens when the free tests run out?
Scanning pauses for the rest of the billing period and the quota resets at the next period. You are not charged for overage, and no test runs against the limit.

Do scans from the IDE count?
Tests run through Snyk's IDE plugin are not counted against the limit on any plan. The CLI and CI runs are what spend the allowance.

Is Snyk still free for open source?
Yes, and public repository scans do not count against any of the four quotas. This has been Snyk's published position for years.

Is 5 projects a hard limit?
The Free plan supports up to 5 projects. The test allowance is the limit most people reach first, and on a large monorepo you can hit the tests cap without ever approaching five projects.

Free-tier limits verified against Snyk's plan page on 30 September 2026. Limits change without notice.

Sources

1. Snyk plans: snyk.io/plans. Used for: Test allowances and per-plan limits.

All sources are the vendor's own plan or documentation pages, checked on 22 October 2026. Plan terms change without notice, so confirm current limits before you rely on them.