Skylos
Skylos: A broad open-source security CLI with optional credit-based cloud features. Ranked #16 of 25 in Static Application Security Testing Software by our editors (7.2/10); pricing: Free plan · 7-day trial; best for developers wanting broad open-source security analysis.
At a glance
- Editor score7.2 / 10
- PricingFree plan · 7-day trial
- Best forDevelopers wanting broad open-source security analysis
- Free planYes
- Paid from$9 usage-based
- Analysis targetSource
- Facts checked22 Sep 2026
Where it wins
- Covers security, secrets, SCA, dead code, quality, and configuration checks
- Free CLI runs locally without login and supports CI/CD gates
- VS Code, MCP, GitHub Actions, GitLab CI, and multiple report formats
Where it doesn't
- Cloud uploads, comparisons, and related actions use credits
- The paid model is based on one-time packs rather than monthly seats
- Advanced enterprise controls are limited to the Enterprise plan
Our verdict on Skylos
Skylos is an open-source static analysis CLI for developers and security teams working across mixed-language repositories. It checks for vulnerabilities such as SQL injection, command injection, SSRF, path traversal, and XSS, alongside hardcoded secrets, dependency vulnerabilities, dead code, quality regressions, technical debt, deployment misconfigurations, and AI-generated code defects. The free CLI runs locally without login, while the broader product adds cloud workflows, stored history, team collaboration, trend analysis, exports, and pull-request evidence.
Pricing is built around a free plan and one-time credit packs. Free OSS CLI includes local scans, dead-code, security, secrets, quality, and technical-debt checks, plus diff review, CI gates, agents, MCP, and AI defense. Starter costs $9 for 500 credits and 30 days of Pro access; Builder costs $39 for 2,500 credits and 90 days; Team costs $129 for 10,000 credits and 180 days; Scale costs $499 for 50,000 credits and 365 days. Credits do not expire. Enterprise adds unlimited repositories and history, unlimited credits, SSO/SAML, compliance reports, audit logs, priority support, and an SLA.
The platform fit is broad: Skylos supports web, Windows, macOS, Linux, a Chrome extension, and an API, with GitHub Actions, GitHub, GitLab CI, Slack, Discord, VS Code, and MCP integrations. Its VS Code extension provides on-save scanning, diagnostics, AI review, and fix previews, while reports can be exported as SARIF, JSON, terminal, HTML, or Markdown. Choose Skylos if local-first analysis and coverage across security and code health matter. Teams seeking a simple per-user subscription or a narrowly focused scanner may prefer a different model.
Your product? Our editors can test Skylos in depth and publish a review, labelled as paid · from $149/mo →
Skylos pricing
All 3 Skylos plans and prices →
Skylos fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $9 usage-based |
| Analysis target | Source |
| Supported languages | 11 languages |
| IDE support | Yes |
| CI/CD support | Yes |
| Deployment | Hybrid |
| SCA included | Yes |
| Fix guidance | Yes |
| Free trial | 7 days · no card needed |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Windows, macOS, Linux |
| Support | Email, Community, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 6 integrations: GitHub Actions, GitHub, Slack, Discord, VS Code, SARIF |
| Pricing | Free plan · 7-day trial (source) |
| Website | skylos.dev |
| Facts checked | 22 Sep 2026 |
Skylos integrations
Skylos lists 6 integrations on its own site.
- GitHub Actions
- GitHub
- Slack
- Discord
- VS Code
- SARIF
Alternatives to Skylos
- Semgrep CodeBroad SAST coverage with strong pull-request, IDE, CI/CD, and custom-rule support.9.2
- GitHub CodeQLA strong fit for GitHub teams that want customizable semantic code scanning.8.9
- Veracode Static AnalysisA broad cloud SAST service for enterprises securing mixed application targets.8.7
Used Skylos? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Skylos for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Skylos is listed in our Static Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/skylos/"><img src="https://www.itechguides.com/best/badge/skylos.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update