Developer Tools And Infrastructure — enterprise stack.
For each requirement below, pick the option that fits your build — recommended first, then free and cheaper alternatives — or skip what your project doesn't need. Tap the info icon next to any requirement to see why it matters.
Source Control Hosting / VCS Infrastructure
Where your code actually runs and serves requests. Picking the right host affects speed, scaling, and how much ops work you do.Pricing & free-tier limitsFree: $0, 2000 Actions mins/mo (Linux), 500MB Packages storage / Team: $4/user/mo - 3000 mins, 2GB Packages / Enterprise: $21/user/mo (annual) - 50k mins included, $0.008/min Linux overage, $0.08/min macOS, Packages $0.008/GB-day storage + $0.50/GB transfer / GitLab Self-hosted CE $0 / Premium SaaS $29/user/mo / Ultimate $99/user/mo
CI/CD Orchestration (Toolchain Build Pipeline)
Automates testing and deploying your code. Saves enormous time and prevents “works on my machine” releases.Pricing & free-tier limitsFree: GH Actions 2000 mins, 500 macOS mins, 1 concurrent job / Jenkins $0 self-hosted infra cost only / BuildKite Free: 1 team, unlimited builds self-hosted agents $0 / Paid Teams: $15/user/mo + self-hosted agent infra / GH Large Runners: 4-vCPU $0.016/min, 16-vCPU $0.064/min, 64-vCPU $0.32/min / CircleCI Free: 6k mins, Paid $30/mo - 25k credits, $0.00002/credit overage ($0.02 per 1k credits)
Build Farm / Compile Farm / Remote Execution (Bazel RBE)
Automates testing and deploying your code. Saves enormous time and prevents “works on my machine” releases.Pricing & free-tier limitsFree: BuildBuddy OSS $0 self-hosted / Cloud Free: 1000 build-mins/mo, 1GB remote cache / Depot Free: 2000 mins/mo / Starter: BuildBuddy $60/mo - 4 parallel workflows, 10GB cache, $0.60/GB overage cache storage / Paid: EngFlow $50k+/year typical $0.002/min remote exec + $0.20/GB cache transfer / Incredibuild $20/mo per core / Large runners cluster $0.008-$0.32/min
Artifact Registry (npm / PyPI / Maven / NuGet / Docker / Go)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: GH Packages 500MB storage + 1GB egress/mo / Cloudsmith Free: 500MB storage, 100k requests/mo / JFrog Free: 2GB storage, 10GB transfer, 3 repos max / Starter: Cloudsmith $25/mo - 5GB storage, $0.15/GB overage, 500GB bandwidth / Paid: JFrog Cloud Pro $56/mo - 100GB storage, 2TB transfer $0.10/GB overage / Enterprise $1350/mo - $4500/mo contact sales / CodeArtifact $0.05/GB-month storage + $0.05 per 10k requests
Package Signing + Sigstore (Cosign / Fulcio / Rekor)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Sigstore public $0 unlimited signing, OIDC keyless / Cosign OSS $0 / GitHub Attestation Free: 110GB-hours public, private 500MB free / AWS Signer Free: first 1000 signs/yr then $0.10/signing job / Chainguard Free: 10 images signed, Paid Teams $1000/mo - 500 images, $2/image overage / AWS Signer Paid: $0.10/job + KMS key $1/mo
CDN for SDK / Toolchain Distribution
Where you keep files users upload or you serve — images, videos, documents — and how fast they reach visitors around the world.Pricing & free-tier limitsFree: Cloudflare Free: unlimited CDN transfer + 10GB R2 storage + 10M Class A ops/mo / GH Releases Free: 100GB bandwidth / CloudFront Free tier 1TB transfer first 12mo then $0.085/GB first 10TB / Pro: Cloudflare Pro $20/mo WAF included, same $0 CDN overage / Bunny $1-10/mo min + $0.01/GB NA/EU, $0.03/GB Asia $0.02/GB over / Fastly $0 starter $0.12/GB min $50/mo effective / Enterprise contact sales $0.02-0.08/GB
Documentation Hosting (SDK Docs / API Reference / Changelog)
Where your code actually runs and serves requests. Picking the right host affects speed, scaling, and how much ops work you do.Pricing & free-tier limitsFree: ReadTheDocs $0 1 concurrent build / GH Pages $0 100GB bandwidth / Cloudflare Pages Free: unlimited bandwidth, 500 builds/mo, 20k files / Mintlify Starter $120/mo - 1M pageviews, $0.05 per 1k pageviews over / ReadTheDocs Business $50/mo - 20k pageviews, $0.003/view over, private docs / GitBook Team $40/mo - $0.10 per extra 1k views / Fern Docs Growth $350/mo
Code Signing Certificate Management (Installer Signing Pipeline)
Encrypts traffic between your users and your servers. Without it browsers flag your site as insecure and you lose trust and search ranking.Pricing & free-tier limitsFree: Self-signed $0 (no OS trust) / Sigstore free no EV / Apple Dev $99/year signing included + notarization / SSL.com EV $249/year unlimited signs via eSigner, eSigner API $120/year base, $0.25/sign after 10 free / Microsoft Trusted Signing $22/mo - 500 signs $0.05/sign over, $300/mo - 5000 signs / DigiCert EV $699/year + HSM token $300 one-time / Azure Key Vault Managed HSM $1.40/HSM/hour ~$1008/mo + $0.03/10k transactions
Secrets Management for Build & Release Pipeline
Automates testing and deploying your code. Saves enormous time and prevents “works on my machine” releases.Pricing & free-tier limitsFree: Vault OSS $0 / Doppler Free: 100 secrets, 2 projects, 50 API calls/day / Infisical Free self-hosted unlimited / HCP Vault Starter $0.03/hr cluster (~$22/mo) + $0.50/10k API calls / AWS Secrets Manager $0.40/secret/mo + $0.05/10k API calls / Dopplers Starter $18/mo - 500 secrets, $0.05/secret over / 1Password Business $19.99/user/mo secrets included
Crash Reporting & Symbolication (Native IDE / Compiler crashes)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Sentry Dev: 5k errors/mo, 1k session replays, 10k performance spans / GlitchTip self-hosted $0 unlimited / Team $26/mo - 50k errors included, $0.000248/error overage ($0.248/1k) / Business $80/mo - 100k errors, $0.00022/error over / Bugsnag Free: 7.5k events/mo, Lite $39/mo 25k events $0.0015/event over / Datadog $12/active committer/mo
Telemetry / Product Analytics (IDE usage, Compiler adoption)
Understands your users and supports them. Drives product decisions and retention.Pricing & free-tier limitsFree: PostHog Free: 1M events/mo, 5k session replays/mo, 1M feature flag requests / Self-hosted OSS $0 unlimited / Mixpanel Free: 100k MTU 1M events / Segment Free: 1k MTU up to 2 sources / Paid: PostHog Scale $0.000248/event ($248 per 1M) + $0.005/replay, $0.0002/flag req over free / Segment Teams $120/mo - 10k MTU, $0.01 per extra MTU / Mixpanel Growth $28/mo base + usage $0.28 per 1k MTU over
Language Server Protocol (LSP) Hosting / Remote Intelligence
Where your code actually runs and serves requests. Picking the right host affects speed, scaling, and how much ops work you do.Pricing & free-tier limitsFree: LSP OSS $0 compute own / Gitpod Free: 50hrs/mo 4-core / Codespaces Free: 120 core-hours/mo, 15GB-month storage / Tabby self-hosted $0 / Starter: Gitpod $9/mo - 100hrs, $0.15/hr overage / Sourcegraph Cloud Free 5 users / Enterprise Cloud $500+/mo est $200k/year large / Copilot Business $19/user/mo, Enterprise $39/user/mo, per seat no overage
Extension Marketplace API (VS Code / JetBrains / Open VSX)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: VS Marketplace & Open VSX $0 publish unlimited / JetBrains Marketplace $0 publish, rev share 85% under $1k sales then 70% after / Cloudflare Workers Free: 100k requests/day, Paid $5/mo - 10M requests, $0.30 per 1M requests over / S3 VSIX storage $0.023/GB, $0.005 per 1k GET requests, bandwidth $0.09/GB / Fastly $50/mo min
Symbol Server for Debugger (PDB / DWARF / Breakpad / dSYM)
Where your code actually runs and serves requests. Picking the right host affects speed, scaling, and how much ops work you do.Pricing & free-tier limitsFree: Symbolicator OSS $0 unlimited / Self-hosted S3: 50GB symbols ~$1.15/mo storage $0.023/GB + $0.09/GB egress / GCS Nearline $0.01/GB storage / Sentry self-hosted free unlimited uploads / Paid: Sentry Business $80/mo includes symbol handling 100k artifact bundles, overage $0.0002 per file / JFrog Enterprise includes 20GB artifact symbols, overage $0.20/GB-mo / Azure Artifacts Symbol Server $2/GB stored, first 2GB free
Performance Benchmarking Farm / Regression Tracking
Rates, labels, and tracking for physical goods. Needed once you actually ship products.Pricing & free-tier limitsFree: Bencher self-hosted $0 / Codspeed Free: 500 runs/mo, 3 branches, 100MB artifacts / GH Actions bench 2000 mins free / Starter: Codspeed Startup $50/mo - 5k runs, $0.01/run over / Bencher Cloud Team $20/mo - 10k benchmarks, $0.005/benchmark over / Paid bare metal: Vultr Bare Metal $120/mo per server 16-core, Equinix c3.small $0.50/hr ~$360/mo, large perf box $800-1500/mo
License / Entitlement API for Dev Tools (Keygen, LemonSqueezy)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Keygen CE OSS $0 self-hosted / LemonSqueezy Free to start 5% + 50c per transaction no monthly / Keygen Cloud Dev $0 - 100 licenses, 10k validations/mo / Starter $49/mo - 1k licenses, $0.05/license over, 50k validations, $0.001/validation over / Cryptlex $25/mo - 500 activations, $0.02/activation over / Scale $299/mo - 25k licenses, Enterprise custom $999+/mo
Issue Tracking / Feedback Infra for DevTool Users
Rates, labels, and tracking for physical goods. Needed once you actually ship products.Pricing & free-tier limitsFree: GH Issues $0 / Linear Free: 250 issues, 10 members / Jira Free: 10 users / Plane OSS $0 self-hosted / Standard: Linear $8/user/mo unlimited issues / Jira Standard $7.16/user/mo up to 50k users / Productboard Starter $20/user/mo - $0 over / Canny Growth $400/mo - 5k tracked users, $0.08/user over / Enterprise Linear $16/user/mo
Dependency Scanning / Vulnerability DB (OSV / Snyk / Socket)
Keeps you secure and compliant with regulations. Required for enterprise customers and handling sensitive data.Pricing & free-tier limitsFree: OSV Scanner $0 unlimited scans / Dependabot $0 / Snyk Free: 200 tests/mo, 1 org / Grype/Trivy OSS $0 / GHAS: Free for public, Private: Team $49/active committer/mo includes CodeQL+Sec Scanning, Secret Scanning stand-alone $19/active committer/mo / Snyk Team $25/dev/mo - 10k tests, $0.003/test over / Mend $3600/year base + per dev / Xray included in JFrog Cloud $56+/mo, Enterprise addon $300/mo / Socket Team $25/mo - 1000 purls
Containerized Test Lab (Linux / Windows / macOS VMs)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: GitHub Actions 2000 Linux mins, 500 macOS mins / QEMU self-hosted $0 / Cirrus Free limited 2 vCPU / Paid: Namespace $0.01/min Linux fast ephemeral, $0.20/min macOS / AWS EC2 Mac mini M2 $1.083/hr min 24hr allocation $26/day, spot $0.65/hr / MacStadium Mac mini $99/mo, Mac Pro $499/mo, Orka cluster $1299/mo / Cirrus $0.02-0.10 per CPU-minute, $0.20/macOS min over
Feature Flag Service for Tooling (devtool gated rollout)
Ships features to a subset of users or toggles them without redeploying. De-risks releases and enables experiments.Pricing & free-tier limitsFree: Flagsmith OSS $0 unlimited / Unleash OSS $0 / GrowthBook OSS $0 / Cloud Free: Flagsmith 50k requests/mo, 1k identity, GrowthBook 10k tracked users / LaunchDarkly Starter $10/mo - 1k MAU, $8.33 per 1k MAU over to 10k, then Pro $75/mo 10k MAU $10 per 1k over / GrowthBook Cloud Pro $149/mo - 25k MAU $10 per 1k over / Statsig Pro $500/mo base - 5M events
API Gateway for SDK APIs
Controls and protects your APIs — quotas, abuse prevention, and firewalls. Important once you have real traffic or many clients.Pricing & free-tier limitsFree: Kong OSS $0 / AWS API Gateway Free: 1M calls/mo first 12mo free, then $3.50 per 1M REST + $0.02/GB data transfer + cache $0.02/hr small / Cloudflare Gateway Free unlimited? basic, Workers Free 100k req/day / Zuplo Free 1k requests/day / Paid: Kong Konnect Plus $250/mo - 2M calls, $0.05 per 1k over / Apigee PayG $500/mo base $0.02 per 1k calls / Zuplo Pro $200/mo - 500k calls $0.10 per 1k over
Remote Cache (Bazel / Gradle / ccache / sccache)
Stores frequent results in fast memory so you serve less from the database. Big lever for speed and cost.Pricing & free-tier limitsFree: self-hosted $0 + S3 storage $0.023/GB / Gradle cache Node OSS free / BuildBuddy Cloud Free: 1GB cache, 500MB download/day / Paid: BuildBuddy Starter $60/mo - 10GB cache $0.60/GB over, unlimited transfer / Gradle Enterprise $12k/year min self-hosted $12/dev/mo managed $25k/year / EngFlow cache $0.005/GB transfer + $0.20/GB-month storage $50k+/year contracts
SBOM Generation & Provenance (SLSA / CycloneDX)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Syft/Trivy/SLSA generator $0 unlimited / GitHub Artifact Attestations Free private 500MB storage, 10k attestations / Docker Scout Free: 3 repos max, Team $15/user/mo - $0.10 per image over / Anchore Enterprise $50k/year typical, Chainguard $0.10 per image scanned over free 100 images / JFrog Evidence included Enterprise $1350/mo+, evidence 5k/mo included $0.05 over
SAST / Static Analysis Infra (CodeQL / SonarQube / Semgrep)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: SonarQube CE $0 / Semgrep OSS 10k scans / CodeQL public $0 / SonarCloud Free private 50k LOC / Paid: SonarCloud Team $18/mo - 100k LOC $45 per 100k over / Semgrep Team $40/dev/mo - 50k LOC, Enterprise $120/dev/mo / GHAS $49/active committer/mo includes CodeQL + Secret Scanning + Dependabot / Checkmarx contact sales $50k+/year / Snyk Code $27/dev/mo
Binary Installer Distribution & Auto-Update (Sparkle / Electron / MSIX)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Sparkle OSS $0 + S3 storage $0.023/GB + $0.09/GB bandwidth / Electron auto-update self-hosted $0 / App Center Distribute Free: 500MB storage, 1GB transfer/mo / ToDesktop Builder $70/mo - 500 MAU, $0.05/MAU over, auto-update included / InstallShield $2000 one-time license / App Center Paid $40/mo per app - 50GB storage $0.50/GB over, bandwidth $0.40/GB
Monorepo Build Orchestration & Code Ownership
Automates testing and deploying your code. Saves enormous time and prevents “works on my machine” releases.Pricing & free-tier limitsFree: Nx OSS $0 / Turborepo remote cache Free: 1000 cache-hours/mo, 5GB cache, unlimited team / Nx Cloud Free: 500 DTE mins/mo, 2000 cache reads/mo / Paid: Nx Cloud Pro $49/mo - 20k DTE mins, $0.02/min over, 100GB cache, extra $0.40/GB / Turborepo Pro via Vercel Pro $20/user/mo includes 500GB-hour cache, $0.15/GB over / EngFlow monorepo $75k+/year / Develocity $12k+/year base
Distributed Test Sharding / Flaky Test Detection
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: JUnit OSS $0 / Currents Free: 500 test results/mo / BuildKite Test Analytics Free: 10k spans/mo / Trunk Flakes Free: 2k flakes/mo / Paid: Datadog CI Visibility $12/active committer/mo or $5 per 1M test spans $0.10 per 1k CI pipeline spans over / BuildKite Analytics $20/mo - 50k spans $0.25 per 1k over / Currents Pro $50/mo - 20k results $0.0015/result over / Launchable $1200/mo base
Log Management / Observability for Build Infra
Automates testing and deploying your code. Saves enormous time and prevents “works on my machine” releases.Pricing & free-tier limitsFree: Grafana OSS $0 / Grafana Cloud Free: 50GB logs/mo, 50GB traces, 10k active metrics, 500hrs synthetic / BetterStack Free: 1GB logs/mo 3-day retention / Axiom Free: 500MB/day / Paid: Datadog Logs $0.10/GB ingested, $1.70 per million indexed + retention $0.10/GB/mo / Grafana Cloud Pro $29/mo - 100GB logs, $0.50/GB over / New Relic Free 100GB/mo then $0.30/GB over + $0.35 per 1k ingest over
Artifact Storage & Backup + Retention Policy (S3/GCS)
Where you keep files users upload or you serve — images, videos, documents — and how fast they reach visitors around the world.Pricing & free-tier limitsFree: MinIO self-hosted $0 / R2 Free: 10GB storage, 10M Class A ops/mo, free egress / B2 First 10GB free then $0.006/GB storage, $0.01/GB download, $0.005/1k transactions / Wasabi $6.99/TB/mo no egress fee, $0 overage egress free (min 90d retention) / S3 Standard $0.023/GB, IA $0.0125/GB, Glacier $0.004/GB, egress $0.09/GB, requests $0.005/1k / GCS Standard $0.02/GB, Nearline $0.01/GB
Developer Portal / SDK Key Management / API Docs Hosting
Where your code actually runs and serves requests. Picking the right host affects speed, scaling, and how much ops work you do.Pricing & free-tier limitsFree: Fern Free: 5k API calls/mo 1 SDK language / Unkey Free: 1k verifications/day 100 keys / Clerk Free: 10k MAU / Svix Free trial 14d / Zuplo Free 1k req/day / Paid: Svix Starter $25/mo - 10k messages $0.0002/msg over / Clerk Pro $25/mo + $0.02 per MAU over 10k / Fern Growth $350/mo - 500k calls $0.001/call over / ReadMe Startup $99/mo per project $0.10 per extra 1k views / Zuplo Pro $200/mo - 500k calls
Hardware Test Lab / Bare Metal for Toolchain Validation
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Self-hosted hardware $0 infra + power / QEMU $0 / Equinix Metal on-demand $0.50/hr c3.small 32-core 64GB up to $1.20/hr large, monthly $300-1500/box / Hetzner AX101 $110/mo 16C/128GB / Vultr Bare $120/mo 16C, $250/mo 32C / AWS bare metal i3.metal $4.992/hr on-demand $1.50/hr spot min 24hr, Mac $1.344/hr / MacStadium Enterprise $1500-5000/mo cluster 10+ nodes, dedicated VLAN
HSM-Backed Code Signing & Notarization EV (Microsoft/Apple)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Sigstore $0 / Apple Notary included $99/year dev program unlimited notarizations / Azure Standard HSM Pool $1.40/HSM/hour ~$1008/mo + $0.03/10k transactions / AWS CloudHSM $1.34/hr per HSM ~$973/mo + EC2 / SSL.com eSigner $120/year - 10 signs free then $0.25/sign / Microsoft Trusted Signing $80/mo Essential 1000 signs $0.08/sign over, $300/mo Business 5000 signs $0.05/sign over / DigiCert EV $699/year + HSM token shipping $300 one-time / YubiKey 5 $55 one-time
Compliance & Audit Log (WORM, SOC2, immutable build logs)
Automates testing and deploying your code. Saves enormous time and prevents “works on my machine” releases.Pricing & free-tier limitsFree: CloudTrail $0 first trail free management events (read/write) 90day / S3 Object Lock config free + storage $0.023/GB / OPA free / Wazuh OSS free / Paid: Vanta Starter $15k/year ($1250/mo) up to 50 employees $12/employee/mo over / Drata $12k/year base Essentials $28/employee/mo over / AWS CloudTrail Lake query $2 per 100k management events over free, data events $0.10 per 100k / S3 Glacier $0.004/GB, Vault Lock free, Object Lock retention no extra
Rate Limiting / DDoS Protection for Registry & API Endpoints
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Cloudflare Free DDoS $0 unlimited L3-7 / AWS Shield Standard $0 / Kong OSS rate limit $0 / Envoy $0 / Paid: Cloudflare Pro $20/mo includes basic WAF + rate rules (10 rules), Advanced Rate Limiting $5/mo per 100k good requests + $5/mo per rule, $0.05 per 10k over / AWS WAF $5/mo per ACL + $1/mo per rule + $0.60 per 1M requests, Shield Advanced $3000/mo + DRT / Fastly WAF $20/mo base + $0.15 per 1k WAF req / Enterprise DDoS contact sales $5k-50k+/mo
Multi-Region Replication & Disaster Recovery for Artifacts/Registry
Copies of your data so a bug, hack, or outage doesn’t become permanent loss. Cheap insurance every serious project needs.Pricing & free-tier limitsFree: rclone $0 / MinIO replication $0 + storage $0.023/GB / R2 inter-bucket replication $0 egress (Cloudflare free egress) / Litestream OSS free / Paid: S3 CRR $0.02/1000 replication requests + $0.09/GB inter-region transfer + dest $0.023/GB storage / JFrog Enterprise+ $1350/mo includes 2 JPD sites, extra site $500/mo / GCS Multi-region $0.026/GB storage, turbo replication $0.04/GB + $0.08/GB egress / Azure GRS $0.048/GB RA-GRS, 16c write $0.10/10k
Private Registry Proxy / Upstream Firewall / Air-Gapped Install
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: Nexus OSS proxy $0 / Verdaccio $0 / JFrog Curation Trial 14d free / Open proxy $0 / Starter: Sonatype Lifecycle Startup $20k/year ~$1666/mo for 100 devs $15/dev/mo over 100 / JFrog Curation $450/mo addon to Enterprise $56 base, Enterprise+ $1350/mo / Cloudsmith Proxy scan $75/mo - 5k packages scanned $0.01/package over / Chainguard proxy $0.20 per blocked malicious, Enterprise $2000+/mo / Checkmarx Supply Chain $25k/year base
Self-Hosted VCS Mirroring & Geo-replication
Runs in multiple regions for speed and resilience. Enterprise-grade reliability and the hardest to retrofit.Pricing & free-tier limitsFree: git CLI mirror $0 / Gitea/Forgejo mirror free unlimited / GH Actions mirroring 2000 mins free / Paid: GitLab Premium Geo $29/user/mo min $725/mo for 25 users, Ultimate $99/user/mo $2475/mo min / GitHub Enterprise Server $21/user/mo (self-hosted HA included), Cluster HA addon $0 extra runner infra / Bitbucket Data Center $20k/year 500 users + Smart Mirrors $10k/year addon / Gitea Enterprise $12/user/mo 50 user min $600/mo
Supply Chain Security (SLSA L3+, Sigstore Policy + TUF / GUAC)
A piece of your stack you may or may not need, depending on scope. Pick the option that fits — or skip it if your project doesn’t require this capability yet.Pricing & free-tier limitsFree: SLSA L3 generator $0 unlimited builds / Sigstore Policy Controller + Kyverno OSS $0 / TUF + GUAC + in-toto OSS $0 / Chainguard Enforce Trial free 30d, Paid Starter $1000/mo - 100 workloads, $10/workload over / Anchore Enterprise $60k/year base + SLSA addon $20k/year / JFrog Evidence & Xray Enterprise $2700/mo includes 5k evidence attestations, $0.05 per attestation over / Docker Scout Policy Team $15/user/mo
How this enterprise developer tools and infrastructure checklist works.
Each requirement below is something a enterprise developer tools and infrastructure build typically needs. Pick one of the four researched options — recommended, free, cheaper or paid — add your own with "Other", or skip the requirement if your project doesn't need it. Nothing is mandatory; the plan on the right tracks what you've decided so nothing gets forgotten.
Your picks are saved in this browser automatically, so you can come back anytime. Options are researched per build level and refreshed as vendors change their plans — always verify details on the provider's page before committing.