GitHub Advanced Security Pricing 2026: The $19 + $30 Split
Since March 2025, GitHub Advanced Security is two separately billed products: Secret Protection ($19/active committer/month) and Code Security ($30), $49 combined. An active committer is anyone who pushed to an enabled repository in the last 90 days. GeekWala covers only dependency scanning, at flat-rate pricing instead of per-committer.
Technical deep-dive: Read our full GitHub Code Security Pricing Explained article.
Feature-by-feature comparison: Read GitHub Code Security vs GeekWala: Full Feature Comparison.
Feature Comparison
| Feature | GitHub Code Security | GeekWala |
|---|---|---|
| Billing unit Key difference | Per active committer (pushed code to an enabled repo in the last 90 days) | Flat-rate per account |
| Products billed | Two standalone SKUs since March 2025 — Code Security + Secret Protection, billed separately | One product, one price |
| Code Security alone | $30/active committer/mo | n/a — GeekWala does not offer code/SAST scanning |
| Secret Protection alone | $19/active committer/mo | n/a — GeekWala does not offer secret scanning |
| Both combined | $49/active committer/mo | n/a |
| Dependency scanning only (no code/secret scanning) Key difference | Not sold standalone — bundled into the two SKUs above | Flat-rate — this is the entire product |
| Cost as team grows | Scales linearly with active-committer count | Fixed — does not scale with headcount |
| Price | GitHub Code Security $30/active committer/mo; GitHub Secret Protection $19/active committer/mo; both combined $49/active committer/mo | Free tier + $12/mo or $99/yr Pro (flat-rate, unlimited projects) |
Prices as published at github.com/enterprise/advanced-security, verified September 10, 2026. A 10-active-committer team running both products lists at ~$490/mo ($5,880/yr). GeekWala Pro is flat-rate, not per-committer — see /pricing for current rates.
When to Use Each
When to use GitHub Code Security
GitHub Code Security is the right choice when:
- You want CodeQL semantic code scanning and secret scanning in the same billing relationship as dependency alerts
- Your active-committer count is small enough that per-committer billing beats a flat rate
- You are fully committed to GitHub as your only source host
When to use GeekWala
GeekWala is the better fit when:
- You only need dependency vulnerability scanning — paying $30-49/committer/mo for code and secret scanning you will not use is wasted spend
- Your active-committer count is large or growing, and per-committer billing would scale against you
- You manage repos outside GitHub, or across multiple hosts
Bundled Platform Pricing vs a Single Flat Rate
Two Billed-Separately Products, One Flat Rate
GitHub splits Code Security ($30/committer/mo) and Secret Protection ($19/committer/mo) into standalone SKUs — $49/committer/mo combined. GeekWala is one product, one flat price, regardless of team size.
You're Paying Per Committer, Not Per Scan
GitHub bills by "active committer" — anyone who pushed code in the last 90 days — so cost scales with team activity, not with how much scanning you actually need. GeekWala's price does not move with your commit activity.
Dependency Scanning Isn't Sold Alone
If dependency vulnerability scanning is your only need, GitHub doesn't offer it as a standalone line item — you're buying into the Code Security SKU (CodeQL + Dependabot integration + Copilot Autofix) at $30/committer/mo to get it. GeekWala is built to be exactly this one thing.
The 2025 SKU Split, and What It Means for Your Bill
Until March 2025, "GitHub Advanced Security" was one bundled product. Since GitHub's March 4, 2025 changelog, it's two standalone products billed separately: GitHub Secret Protection and GitHub Code Security. If your team already budgeted for "GitHub Advanced Security" as a single line item, that line item no longer exists as such — you now choose one, the other, or both.
The Two Products
| Product | Price | What it covers |
|---|---|---|
| GitHub Secret Protection | $19/active committer/month | Secret scanning, push protection, AI-powered secret detection |
| GitHub Code Security | $30/active committer/month | CodeQL semantic code scanning, Copilot Autofix, security campaigns, Dependency Review Action |
| Both together | $49/active committer/month combined | Everything above, across the same repo scope |
Pricing as published at github.com/enterprise/advanced-security, verified September 10, 2026.
What "Active Committer" Actually Means
Neither product bills per named license. An active committer is any unique user who pushed code to a repository with the feature enabled, within a rolling 90-day window on the cloud product. This is the same usage-based billing shape Snyk uses (contributing developer) and Safety CLI does not (Safety bills per licensed developer seat) — worth knowing because it means your bill can move month to month even with a fixed headcount, depending on who actually pushed code recently.
What This Looks Like in Dollars
A 10-active-committer team buying Code Security alone (the dependency-scanning- adjacent product — it bundles Dependabot integration and Dependency Review alongside CodeQL) lists at ~$300/month ($3,600/year). The same team buying both products lists at ~$490/month ($5,880/year).
There is no way to buy dependency scanning alone from GitHub at a lower price point than Code Security's $30/committer/month — the Dependabot-adjacent dependency review capability ships inside that SKU, bundled with CodeQL and Copilot Autofix whether you use them or not.
If Dependency Scanning Is the Only Thing You Need
GeekWala's entire product is dependency vulnerability scanning with EPSS and CISA KEV prioritization — no code scanning, no secret scanning, no bundling. If CodeQL and Copilot Autofix are capabilities your team doesn't currently use, the $30/committer/month Code Security SKU is paying for a lot you're not getting value from. GeekWala's flat-rate Pro plan (see /pricing) doesn't require buying into code-scanning capability to get dependency-scanning coverage. If you do want CodeQL and Copilot Autofix, GitHub Code Security remains the only source for them — GeekWala isn't a substitute for that specific capability at any price.
Bottom Line
If you already run GitHub and want CodeQL, Copilot Autofix, and secret scanning in the same billing relationship as Dependabot, the $19 + $30 combined rate reflects a genuinely broader product than dependency scanning alone. If dependency scanning is the specific gap you're closing, compare the $30/committer/month Code Security rate against a flat-rate tool built to do exactly that one thing. See our full GitHub Code Security vs GeekWala feature comparison for the capability-by-capability breakdown.
Learn More
Frequently Asked Questions
How much does GitHub Advanced Security cost in 2026?
GitHub Advanced Security is no longer a single SKU — since the March 2025 changelog it is two standalone, separately-billed products: GitHub Secret Protection at $19/active committer/month and GitHub Code Security at $30/active committer/month, $49/active committer/month combined. Prices as published at github.com/enterprise/advanced-security, verified September 10, 2026.
What is an "active committer" for GitHub billing purposes?
Any unique user who pushed code to a repository with the feature enabled, within a rolling 90-day window on the cloud product — a usage-based count, not a fixed per-seat license.
Can I buy just dependency scanning from GitHub without code or secret scanning?
Not as a standalone product. Dependabot's free alerts cover basic dependency scanning, but the paid, more capable dependency-review tier ships inside the Code Security SKU ($30/active committer/mo) alongside CodeQL semantic code scanning and Copilot Autofix — you cannot buy just the dependency piece at a lower price.
Is GeekWala cheaper than GitHub Code Security?
For any team where dependency scanning is the actual need, yes in most cases — GeekWala's flat Pro rate (see /pricing) does not require also paying for CodeQL code scanning and Copilot Autofix bundled into the $30/active-committer/mo Code Security SKU. For teams that want CodeQL and Copilot Autofix specifically, GitHub Code Security includes capabilities GeekWala does not offer at any price.
Where can I verify current GitHub Advanced Security pricing myself?
github.com/enterprise/advanced-security is GitHub's own published pricing page for these products. The figures on this page were verified there on September 10, 2026 — check the current page before budgeting, since pricing changes without notice.
Try GeekWala free
No credit card required. One flat rate for dependency scanning — no bundled code or secret scanning to pay for.