Skylos review
A broad open-source security CLI with optional credit-based cloud features.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Skylos is an open-source static analysis CLI for developers and security teams working across mixed-language repositories. It checks for vulnerabilities such as SQL injection, command injection, SSRF, path traversal, and XSS, alongside hardcoded secrets, dependency vulnerabilities, dead code, quality regressions, technical debt, deployment misconfigurations, and AI-generated code defects. The free CLI runs locally without login, while the broader product adds cloud workflows, stored history, team collaboration, trend analysis, exports, and pull-request evidence.
Pricing is built around a free plan and one-time credit packs. Free OSS CLI includes local scans, dead-code, security, secrets, quality, and technical-debt checks, plus diff review, CI gates, agents, MCP, and AI defense. Starter costs $9 for 500 credits and 30 days of Pro access; Builder costs $39 for 2,500 credits and 90 days; Team costs $129 for 10,000 credits and 180 days; Scale costs $499 for 50,000 credits and 365 days. Credits do not expire. Enterprise adds unlimited repositories and history, unlimited credits, SSO/SAML, compliance reports, audit logs, priority support, and an SLA.
The platform fit is broad: Skylos supports web, Windows, macOS, Linux, a Chrome extension, and an API, with GitHub Actions, GitHub, GitLab CI, Slack, Discord, VS Code, and MCP integrations. Its VS Code extension provides on-save scanning, diagnostics, AI review, and fix previews, while reports can be exported as SARIF, JSON, terminal, HTML, or Markdown. Choose Skylos if local-first analysis and coverage across security and code health matter. Teams seeking a simple per-user subscription or a narrowly focused scanner may prefer a different model.
Skylos pros and cons
- Where it wins
- Covers security, secrets, SCA, dead code, quality, and configuration checks
- Free CLI runs locally without login and supports CI/CD gates
- VS Code, MCP, GitHub Actions, GitLab CI, and multiple report formats
- Where it doesn't
- Cloud uploads, comparisons, and related actions use credits
- The paid model is based on one-time packs rather than monthly seats
- Advanced enterprise controls are limited to the Enterprise plan
Skylos fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update