United Kingdom verdict (TL;DR)
Verified 2026-05-18GitHub and GitLab split the UK code repository market along the same SCM-anchor logic as the US: teams on GitHub run GitHub; teams wanting an all-in-one DevSecOps platform run GitLab. The UK fintech cohort (Monzo, Revolut, Wise, GoCardless, Starling) is overwhelmingly on GitHub. UK public sector (GDS, HMRC, NHS Digital, Cabinet Office) hosts open-source code on GitHub.com under the UK government open-source policy, while maintaining internal repositories on GitHub Enterprise or Azure DevOps Repos. NCSC Active Cyber Defence programme integrates with GitHub for security advisories and dependency alerts: UK enterprises on GitHub benefit from NCSC-aligned vulnerability notifications. UK GDPR requires particular care with PII in test fixtures stored in repositories; the ICO has issued guidance on PII in development environments. Self-hosted alternatives (Gitea, Codeberg, Forgejo) have a small but genuine UK presence among privacy-conscious developers and civil society organizations. Bitbucket is present in Atlassian-stack UK agencies and consultancies.
Picks for United Kingdom
- UK tech scaleups and fintech (GitHub-anchored): github GitHub is the default for UK fintech (Monzo, Revolut, Wise, GoCardless) and London tech scaleups. NCSC Active Cyber Defence dependency alerts integrated. UK government open-source code is on GitHub.com.
- UK DevSecOps platform consolidation: gitlab GitLab Self-Managed or SaaS with EU data residency. Used by UK enterprises wanting SCM, CI/CD, SAST, and DAST on one platform. UK GDPR-compliant with EU-hosted SaaS option.
- UK public sector Microsoft-stack (HMRC, NHS, Cabinet Office): azure-devops-repos HMRC and NHS England run Azure DevOps including Azure DevOps Repos on Azure UK South/UK West regions. Default for UK central government organizations fully committed to the Microsoft stack.
- Atlassian-stack UK agencies and consultancies: bitbucket Native Jira and Confluence integration. Prevalent in UK digital agencies and consultancies standardized on Atlassian toolchain for client project delivery.
- UK sovereign and privacy-first self-hosted Git: gitea Lightweight self-hosted Git. Used by UK civil society organizations, privacy-focused companies, and developers wanting UK-controlled infrastructure without GitLab Self-Managed operational overhead.
How the code repository / version control market looks in United Kingdom
UK code repository adoption closely mirrors US patterns at the modern commercial tier. The London-headquartered fintech and tech scaleup cohort (Monzo, Revolut, Wise, GoCardless, Checkout.com, Marshmallow, Zilch) is overwhelmingly on GitHub. This reflects the cohort's founding between 2010 and 2020 and GitHub's dominant position during that period.
UK government and public sector presents a distinct pattern. The UK government open-source policy (published by GDS, the Government Digital Service) mandates publishing government software as open source where possible. GDS, HMRC, the Home Office, NHS Digital, and the Cabinet Office Digital all have public GitHub organizations hosting UK government open-source projects. This makes GitHub.com the visible face of UK government code hosting for open-source output. Internal repositories for sensitive government systems are a different story: these run on GitHub Enterprise Server (self-hosted), Azure DevOps Repos on Azure UK regions, or GitLab Self-Managed, depending on the department and classification level.
NCSC Active Cyber Defence (ACD) integrates with GitHub to notify UK enterprises of security advisories, dependency vulnerabilities, and malicious package alerts via GitHub Security Advisories. UK enterprises on GitHub receive NCSC-aligned vulnerability notifications through the standard GitHub Dependabot and Security Advisory workflow. This is a meaningful UK-specific benefit: NCSC coordinates with GitHub to prioritize vulnerability disclosure for UK-relevant packages and UK public-sector repositories.
UK GDPR creates specific obligations for code repositories. The ICO (Information Commissioner's Office) has issued guidance on personal data in development environments. PII stored in UK repository test fixtures (UK postal codes, NHS numbers, driving licence numbers) is personal data under UK GDPR. The ICO can and has investigated development environment data breaches. UK engineering teams should treat repository PII controls as a compliance matter, not just a best practice. Secret scanning (GitHub Advanced Security, GitLab SAST) should be mandatory for any UK enterprise repository containing customer-adjacent code.
Self-hosted alternatives have a small but genuine UK presence. Gitea is used by UK civil society organizations (charities, open-source foundations) wanting UK-hosted SCM without commercial SaaS dependency. Codeberg (German non-profit, Forgejo-based) is used by a minority of UK privacy-first developers, particularly in the Debian/Ubuntu community. Forgejo itself has UK contributors.
UK GDPR and Data Protection Act 2018: personal data of UK residents (including PII in code repository test fixtures, NHS numbers, driving licence numbers, UK postcodes linked to individuals) is subject to UK GDPR; ICO has issued guidance on development environment PII; enable secret scanning and configure synthetic test data. UK data residency: repositories hosted on GitHub.com (Microsoft US) require Standard Contractual Clauses under UK International Data Transfer Agreements (IDTAs); Microsoft provides IDTAs for UK data transfers; Azure DevOps on Azure UK South/UK West and GitLab SaaS EU region provide UK/EU data residency alternatives. NCSC Cyber Essentials Plus: SCM access control (MFA on repository admin, least-privilege service accounts) is assessed in Cyber Essentials Plus audits required for UK government contracts and NHS suppliers. NCSC Active Cyber Defence: UK enterprises on GitHub receive NCSC-coordinated vulnerability advisories via GitHub Security Advisories; keep Dependabot enabled and SBOM generation active. UK government security classification: repositories handling OFFICIAL-SENSITIVE or above must be hosted on UK government-approved infrastructure (GovAssure approved); GitHub Enterprise Server or Azure DevOps on Government Cloud are the viable paths. IR35 and contractor code: UK contractors working through umbrella companies who commit code to client repositories should ensure repository access is provisioned via the end-client's identity management, not personal accounts, to satisfy IR35 audit trail requirements.
Quick comparison, ranked for United Kingdom
| Product | Best for | Starts at | 10-emp/mo* | Pricing | G2 | Geo |
|---|---|---|---|---|---|---|
| 1 GitHub | Any organization writing software, from solo developers to Fortune 500 enterprises | $0 + $0/emp | $0 | 4.7 | Global; strongest in US, EU, UK, India, Japan | |
| 2 GitLab | Engineering organizations wanting consolidated DevSecOps | $0 + $0/emp | $0 | 4.5 | Global; strongest in US, EU, UK, Germany, India | |
| 3 Bitbucket | Atlassian-anchored organizations | $0 + $0/emp | $0 | 4.3 | Global; strongest in US, EU, Australia | |
| 5 Azure DevOps Repos | Microsoft-anchored enterprises and .NET shops | $0 + $0/emp | $0 | 4.1 | Global; strongest in US, EU, UK | |
| 4 Sourcegraph | Monorepo and large multi-repo enterprises | $0 + $0/emp | $0 | 4.4 | Global; strongest in US, EU | |
| 7 Gitea | Small to mid-size teams wanting self-hosted Git | $0 + $0/emp | $0 | 4.6 | Global; self-hosted anywhere | |
| 8 Codeberg | OSS projects, ethical-tech orgs, EU sovereignty buyers | $0 + $0/emp | $0 | 4.7 | Global; EU data residency (Berlin, Germany) | |
| 10 Forgejo | Ethical-tech, public-sector, NGO, and FOSS-aligned orgs | $0 + $0/emp | $0 | 4.6 | Global; self-hosted anywhere; Codeberg-hosted EU | |
| 6 AWS CodeCommit | No greenfield use case; existing AWS-anchored customers | $0 + $0/emp | $0 | 4.1 | AWS regions (US, EU, AU, AP, CA) | |
| 9 Phorge | Organizations with active Phabricator deployments | $0 + $0/emp | $0 | 4.3 | Global; self-hosted anywhere |
*10-employee monthly cost = base fee + (per-employee × 10) using the lowest published tier. For opaque-pricing vendors, no value is shown.
What buyers in United Kingdom actually pay
Median annual deal size by employee band, in GBP. Crowdsourced from anonymized buyer disclosures.
| Product | Employee band | Median annual (GBP) | Sample | Notes |
|---|---|---|---|---|
| GitHub | GitHub Team (per user/month, GBP) | £38 | 198 | Approx £3.10/user/month; 3,000 Actions minutes; GBP-billed |
| GitHub | GitHub Enterprise (per user/month) | £200 | 141 | Approx £16.50/user/month; SAML SSO, audit log; GBP-billed |
| GitLab | GitLab Premium SaaS (per user/month) | £455 | 98 | Approx £37.90/user/month; EU data residency option |
| Bitbucket | Bitbucket Cloud Standard (per user/month) | £29 | 124 | Approx £2.40/user/month; GBP-billed via Atlassian |
| Azure DevOps Repos | Azure DevOps Basic (per user/month) | £130 | 87 | First 5 users free; £10.80/user/month; Azure UK South region |
United Kingdom-built or United Kingdom-strong vendors worth knowing
Not yet ranked in our global top 10, but credible options for United Kingdom buyers and worth a shortlist.
Codeberg (UK contributor community)
Visit ↗German non-profit (Berlin) but with meaningful UK open-source contributor base. Codeberg.org is Forgejo-based and German-hosted. Used by UK privacy-first developers as a GitHub alternative with EU data residency. Not a UK product but part of the UK sovereignty-aware developer community.
SourceHut
Visit ↗US-founded but widely used by UK free-software community members. Minimalist, email-patch-based workflow. Popular among UK developers in the OpenBSD, Alpine Linux, and Sway communities. Very niche; not an enterprise platform.
Global picks that don't fit here
- AWS CodeCommitAWS deprecated new-customer onboarding July 25, 2024. UK teams on AWS should migrate to GitHub or GitLab via AWS Marketplace. No UK-specific considerations justify continued CodeCommit adoption.
- PhorgeNegligible UK adoption. Phorge is relevant only for teams with legacy Phabricator/Differential workflows, which are rare in UK engineering organizations.
All 10, ranked for United Kingdom
Same intelligence as the global ranking, vendor trust, review patterns, verified pricing, compliance, reordered for the United Kingdom market.
GitHub
The default code repository for modern software engineering.
GitHub is the dominant code repository platform, with roughly 100M developers reported in 2024 and the broadest integration ecosystem in developer tools. Microsoft acquired GitHub in 2018 for $7.5B and has expanded the platform aggressively, embedding Copilot, Actions (CI/CD), Advanced Security, Codespaces, and increasingly agentic workflows. The product is the industry default and the most common procurement starting point. Trade-offs: pricing has crept up at Enterprise tiers, Copilot is increasingly required to capture full value (separate per-seat add-on), Codespaces pricing changes in 2024 caught buyers off guard, and the 2022 Copilot lawsuit (DOE plaintiffs) is still working through the courts.
Almost any modern engineering organization, from solo developers and OSS maintainers through Fortune 500 enterprises. The rational default for greenfield repo decisions in 2026.
Ethical-tech and FOSS-purist organizations rejecting Microsoft ownership (Codeberg/Forgejo better), EU data-sovereignty buyers wanting native EU non-profit (Codeberg better), or air-gap regulated environments without GitHub Enterprise Server (GitLab Self-Managed or Gitea better).
Strengths
- Industry default with ~100M developers and broadest integration ecosystem
- Bundled Actions (CI/CD), Packages, Codespaces, Copilot, Advanced Security
- Strongest developer community and marketplace (20,000+ Actions)
- Microsoft parent stability and procurement reach
- Free public-repo tier is genuinely usable for individuals and OSS
- Strong SAML SSO, SCIM, and audit logging at Enterprise
- Copilot deeply integrated; agentic features expanding (Workspace, Agent Mode)
Weaknesses
- Enterprise pricing has crept up through 2023-2025 contract renewals
- Copilot is a separate per-seat add-on; full AI capability requires it
- Codespaces 2024 pricing changes blindsided some buyers
- 2022 Copilot lawsuit (DOE plaintiffs) ongoing; IP indemnity questions persist
- Microsoft-default lock-in for organizations that resist Azure / Microsoft 365
- Outage history: multiple multi-hour incidents in 2023-2024 across Actions and PRs
Pricing tiers
public- FreeUnlimited public and private repos with limited Actions minutes and Codespaces hours$0+$0 /mo +/emp
- TeamPer user; protected branches, code owners, 3,000 Actions minutes$4+$4 /mo +/emp
- Enterprise CloudPer user; SAML SSO, SCIM, audit log, 50,000 Actions minutes$21+$21 /mo +/emp
- Enterprise ServerSelf-hosted GitHub Enterprise; annual contractQuote
- Copilot Business add-onPer user, separate from GitHub seat$19+$19 /mo +/emp
- · Copilot is a separate per-seat add-on at $19/user/mo (Business) or $39/user/mo (Enterprise)
- · Actions minutes overages billed per-minute; macOS runners cost roughly 10x Linux
- · Advanced Security is a separate add-on (~$49/active committer/mo)
- · Codespaces compute and storage billed separately; 2024 pricing changes affected buyers
- · GitHub Enterprise Server requires annual contract with implementation services
Key features
- +Git hosting with unlimited public and private repos
- +Pull requests with code review, branch protection, code owners
- +GitHub Actions CI/CD bundled with usage allowance
- +GitHub Packages for npm, Maven, Docker, NuGet, RubyGems
- +Codespaces cloud development environments
- +GitHub Copilot AI coding (separate add-on)
- +GitHub Advanced Security (SAST, secret scanning, Dependabot)
- +GitHub Enterprise Server for self-hosted deployment
- +SAML SSO, SCIM provisioning, audit log streaming
- +Issues, Projects, Discussions, Wikis, Pages
GitLab
All-in-one DevSecOps platform spanning repo, CI/CD, security, and AI.
GitLab is the credible all-in-one DevSecOps alternative to GitHub, IPO completed on NASDAQ as GTLB in October 2021, and reporting approximately $590M revenue for FY25. The product differentiator is consolidation: one platform covering Git hosting, CI/CD, container registry, security scanning (SAST, DAST, dependency, container, secret detection), and the Duo AI assistant. Best fit for buyers wanting one DevSecOps vendor instead of stitching GitHub + Actions + third-party security. Trade-offs: the 2023 tier reshuffle that raised Premium and removed features pushed some customers to GitHub, Duo is a per-seat add-on (not bundled), the platform footprint is heavy for teams that just want a repo, and self-managed installations require meaningful operational investment.
Engineering organizations (50 to 50,000+) wanting one DevSecOps vendor instead of GitHub plus separate CI/CD, security scanning, and registry vendors. Particularly strong for regulated industries running GitLab Self-Managed on-prem.
Small teams that just need a repo (GitHub or Gitea simpler and cheaper), Atlassian-anchored shops (Bitbucket native to Jira/Confluence), or ethical-tech buyers wanting non-profit governance (Codeberg better).
Strengths
- All-in-one DevSecOps: repo, CI/CD, registry, SAST, DAST, secret scanning, Duo AI
- Single vendor TCO advantage versus GitHub + add-ons + third-party security
- Strong self-managed (on-prem) deployment option for regulated industries
- Public company (NASDAQ:GTLB) with audited financials and roadmap transparency
- Open-core model with permissive Community Edition
- Built-in compliance frameworks and audit events at Premium and Ultimate
- Mature merge request workflow and code review
Weaknesses
- Duo AI is a separate per-seat add-on; not bundled in any tier
- 2023 tier reshuffle raised Premium and moved features behind Ultimate
- Self-managed installations require non-trivial operational investment
- Smaller marketplace and third-party integration ecosystem than GitHub
- AI Pricing controversy in 2024 (Duo per-seat add-on) drew customer pushback
- UI complexity reported by single-feature buyers wanting only repo
Pricing tiers
public- FreeSaaS or self-managed; limited CI minutes and seats$0+$0 /mo +/emp
- PremiumPer user; advanced CI/CD, compliance, support$29+$29 /mo +/emp
- UltimatePer user; SAST, DAST, security dashboard, portfolio management$99+$99 /mo +/emp
- Duo Pro add-onPer user; AI code suggestions and chat$19+$19 /mo +/emp
- Duo Enterprise add-onPer user; advanced AI features for Ultimate$39+$39 /mo +/emp
- · Duo AI is a separate per-seat add-on (not bundled in Premium or Ultimate)
- · Ultimate-only features (SAST, DAST, security dashboard) often push buyers up from Premium
- · Self-managed deployment requires infrastructure and ops investment
- · CI minutes and storage overages metered separately on SaaS
Key features
- +Git hosting with unlimited repos (SaaS) or self-managed
- +Merge requests with code review and approval rules
- +Built-in GitLab CI/CD with runners (SaaS and self-managed)
- +Container Registry, Package Registry, Helm Chart Registry
- +Built-in security scanning (SAST, DAST, secret, dependency, container)
- +GitLab Duo AI (code suggestions, chat, vulnerability explanation)
- +Compliance frameworks and audit events (Premium/Ultimate)
- +Self-managed deployment for on-prem / air-gap
- +SAML SSO, SCIM, granular role-based access
- +Value Stream Management and DORA metrics
Bitbucket
Atlassian-anchored Git hosting with native Jira and Confluence integration.
Bitbucket is the Atlassian Git hosting platform (NASDAQ:TEAM), a distant #3 in the category that survives largely on Atlassian-bundled procurement. The product strength is native integration with Jira, Confluence, and the broader Atlassian portfolio. Trade-offs are substantial: the Bitbucket Server (self-hosted) end-of-life on Feb 15, 2024 forced large-scale cloud migration with double-digit price increases that drew significant customer pushback. Atlassian Pipelines (CI/CD) lacks feature parity with GitHub Actions or GitLab CI, the AI story (Atlassian Intelligence) lags Copilot and Duo materially, and the platform has lost developer mindshare consistently through 2022-2025. Best fit is Atlassian-anchored shops where Jira and Confluence are non-negotiable.
Atlassian-anchored organizations where Jira and Confluence are mandatory, particularly mid-market and enterprise teams that already pay Atlassian and want bundled procurement.
Greenfield repo decisions (GitHub or GitLab better), modern DevSecOps consolidation (GitLab better), or AI-first engineering teams (Copilot and Duo are years ahead of Atlassian Intelligence).
Strengths
- Native Jira and Confluence integration (commit/PR linking, smart commits)
- Atlassian Marketplace and procurement bundled with broader Atlassian portfolio
- Free tier for up to 5 users (small teams and OSS-adjacent)
- Bitbucket Pipelines included with subscription (minutes-based)
- SAML SSO and SCIM at Premium tier
- Established product (since 2008) with deep enterprise install base
Weaknesses
- Bitbucket Server end-of-life Feb 15, 2024 forced cloud migration with price increases
- Atlassian Pipelines lacks feature parity with GitHub Actions or GitLab CI
- Atlassian Intelligence AI story lags Copilot and Duo materially
- Developer mindshare declining consistently 2022-2025
- Outage history: extended Atlassian Cloud incident April 2022 (multi-day, customer-impacting)
- Smaller integration ecosystem than GitHub or GitLab
Pricing tiers
public- FreeUp to 5 users; 50 build minutes/mo$0+$0 /mo +/emp
- StandardPer user; 2,500 build minutes/mo$3.3+$3.3 /mo +/emp
- PremiumPer user; 3,500 build minutes/mo, SAML SSO, deployment permissions$6.6+$6.6 /mo +/emp
- Data Center (self-hosted)Annual contract for self-managed Bitbucket Data CenterQuote
- · Pipelines minutes overages billed per-minute
- · LFS storage billed separately beyond included quota
- · Atlassian Intelligence (AI) is a separate add-on at higher tiers
- · Bitbucket Server (legacy self-hosted) end-of-life Feb 15, 2024 forced cloud or Data Center migration
- · Data Center pricing increased through 2023-2024 contract renewals
Key features
- +Git hosting with unlimited private repos
- +Pull requests with code review and required reviewers
- +Bitbucket Pipelines CI/CD (minutes-based)
- +Native Jira and Confluence integration (smart commits)
- +Atlassian Marketplace integrations
- +SAML SSO and SCIM (Premium)
- +Deployment permissions and merge checks (Premium)
- +Bitbucket Data Center for self-managed deployment
- +Mirroring and Git LFS support
- +Atlassian Intelligence (limited AI features)
Azure DevOps Repos
Microsoft-anchored Git hosting bundled with Azure DevOps Services and Server.
Azure DevOps Repos is the Git hosting component of Azure DevOps Services (cloud) and Azure DevOps Server (on-prem, formerly TFS), the Microsoft legacy enterprise DevOps suite. The product is bundled with Boards, Pipelines, Test Plans, and Artifacts. Best fit is Microsoft-anchored enterprises with legacy TFS (Team Foundation Server) investments, regulated industries running Azure DevOps Server on-prem, and .NET shops deep in the Microsoft ecosystem. Trade-offs: Microsoft itself has consistently steered new customers to GitHub since the 2018 acquisition, Azure DevOps roadmap velocity is materially slower than GitHub, AI features are GitHub-first (Copilot is not native to Azure DevOps Repos), and developer mindshare is dominated by GitHub even inside Microsoft.
Microsoft-anchored enterprises with legacy TFS investments, regulated industries running Azure DevOps Server on-prem, and .NET shops deep in Visual Studio and the Microsoft ecosystem.
Greenfield repo decisions inside or outside Microsoft (GitHub Enterprise is the Microsoft-internal default for new projects), AI-first teams (GitHub Copilot is not natively integrated), or buyers wanting fastest roadmap velocity (GitHub roadmap moves faster).
Strengths
- Bundled with Azure DevOps Services or Server (Boards, Pipelines, Test, Artifacts)
- Azure DevOps Server provides mature on-prem deployment for regulated industries
- Native integration with Visual Studio and .NET tooling
- Microsoft enterprise procurement and EA bundling
- Strong legacy TFS migration path (TFVC and Git)
- Free for up to 5 users
Weaknesses
- Microsoft steers new customers to GitHub; Azure DevOps is legacy-anchored
- Roadmap velocity materially slower than GitHub
- AI features GitHub-first; Copilot not native to Azure DevOps Repos
- UI dated relative to GitHub or GitLab
- Smaller developer mindshare and community
- Future of Azure DevOps Server post-2027 unclear; Microsoft has not committed beyond current support windows
Pricing tiers
public- FreeUp to 5 users; Basic features$0+$0 /mo +/emp
- BasicPer user beyond first 5; Boards, Repos, Pipelines, Artifacts$6+$6 /mo +/emp
- Basic + Test PlansPer user; adds Test Plans manual testing$52+$52 /mo +/emp
- Azure DevOps ServerSelf-hosted; CAL-based licensing with annual contractQuote
- · Test Plans is a meaningful uplift over Basic
- · Pipelines parallel jobs metered separately beyond included quota
- · Azure DevOps Server requires CALs and annual contract
- · Migration to GitHub Enterprise often recommended by Microsoft sales
Key features
- +Git hosting with unlimited private repos
- +Pull requests with policies, code review, branch protection
- +TFVC (Team Foundation Version Control) support for legacy projects
- +Azure Pipelines CI/CD
- +Azure Boards (work tracking)
- +Azure Artifacts (package management)
- +Azure Test Plans (manual and exploratory testing)
- +Self-hosted Azure DevOps Server
- +Azure Active Directory SSO and group integration
- +Visual Studio and .NET native integration
Sourcegraph
Code search and AI code intelligence (Cody) for monorepo enterprises.
Sourcegraph is the code-search and code-intelligence platform that sits adjacent to (not replacing) GitHub, GitLab, and Bitbucket repositories. Founded 2013, last priced Series D $125M in 2022 at a $2.625B valuation. The product strength is universal code search across multiple repositories and Git hosts, plus the Cody AI assistant which anchors on the code-search foundation for stronger context retrieval in massive monorepos. Best fit for enterprises with millions of LOC across many repos where finding and understanding code is the actual bottleneck. Trade-offs: Sourcegraph is not a repo host (you still pay GitHub or GitLab), the 2024-2025 paid-tier shift moved features behind Enterprise that were previously available cheaper, and the product is overkill for small codebases.
Enterprises with massive codebases (millions of LOC, monorepo or multi-repo) where code search and understanding is the primary bottleneck (50 to 50,000 engineers). Particularly strong for organizations with legacy code that resists onboarding.
Small codebases and single-repo teams (GitHub search sufficient), individual developers (Cursor or Copilot cheaper), or buyers wanting a repo host (Sourcegraph is adjacent, not replacement).
Strengths
- Native code search across multiple repositories and Git hosts
- Cody AI assistant anchored on code-search context (strong monorepo awareness)
- Self-hosted Enterprise deployment for air-gap and regulated industries
- Integrations with GitHub, GitLab, Bitbucket, Azure DevOps, Gerrit, Perforce
- Code Insights for repo analytics and refactoring tracking
- Multiple model options in Cody (Claude, GPT, etc.)
Weaknesses
- Not a repo host; layered on top of GitHub or GitLab (additional spend)
- 2024-2025 paid-tier shift moved features behind Enterprise
- Overkill for small codebases and single-repo teams
- Cody agentic features arrived later than Cursor and Claude Code
- Adoption requires Sourcegraph foundation deployment effort
- Pricing meaningful at enterprise scale
Pricing tiers
partial- Free (Cody only)Individual Cody with limited prompts$0+$0 /mo +/emp
- Pro (Cody)Per user; individual Cody Pro$9+$9 /mo +/emp
- Enterprise StarterPer user; team Cody and code search basics$19+$19 /mo +/emp
- EnterprisePer user with Sourcegraph platform; custom quoteQuote
- · Sourcegraph platform separate from Cody at Enterprise
- · Per-seat scaling meaningful at Enterprise
- · Self-hosted Enterprise has setup and infrastructure costs
- · 2024-2025 tier shift moved some prior-tier features behind Enterprise
Key features
- +Universal code search across repos and Git hosts
- +Cody AI assistant (chat, completions, edits) anchored on code search
- +Code Insights (repo analytics, refactoring tracking)
- +Batch Changes (large-scale automated refactors)
- +Self-hosted Enterprise deployment
- +Integrations with GitHub, GitLab, Bitbucket, Azure DevOps, Gerrit, Perforce
- +Multiple model options in Cody (Claude, GPT, local)
- +Sourcegraph CLI and API
- +SAML SSO and SCIM at Enterprise
Gitea
Lightweight self-hosted Git server, BSD-licensed, mature.
Gitea is the leading lightweight self-hosted Git server, forked from Gogs in 2016 by community contributors. The product is BSD-licensed (open-source), runs on a single binary with minimal dependencies, and is designed for teams that want self-hosted Git without GitLab Self-Managed operational burden. In 2022, Gitea Limited (a for-profit corporate entity) was formed to manage the project, which prompted community concerns about IP rights and led to the Forgejo hard fork (covered separately at rank 10). Gitea Cloud (managed SaaS) launched 2023. Best fit for small to mid-size teams wanting self-hosted Git with low ops overhead. Trade-offs: the 2022 corporate-fork controversy created lasting community trust questions, AI features are absent, and the integration ecosystem is materially smaller than GitHub or GitLab.
Small to mid-size teams (1 to 200 engineers) wanting self-hosted Git with low operational overhead, OSS projects, homelab developers, and educational institutions.
Enterprise organizations requiring deep SSO/SCIM/compliance (GitLab Self-Managed or GitHub Enterprise Server better), AI-anchored teams (Copilot or Duo required), or buyers prioritizing pure community governance (Codeberg or Forgejo better).
Strengths
- Lightweight single-binary deployment (minimal ops burden)
- BSD-licensed open-source with permissive community fork rights
- Mature feature set (PRs, issues, wiki, code review, CI/CD)
- Gitea Cloud managed SaaS option since 2023
- Low resource requirements (runs on Raspberry Pi or small VPS)
- Strong fit for homelab, OSS hosting, and small-team self-hosting
Weaknesses
- 2022 corporate-fork controversy (Gitea Limited formation) created community trust questions
- Forgejo hard fork (October 2022) split community
- No AI features (no Copilot equivalent)
- Integration ecosystem materially smaller than GitHub or GitLab
- Enterprise features (SSO, audit logging) less mature than GitLab
- No managed cloud option at GitHub or GitLab scale
Pricing tiers
public- Self-hosted (open-source)BSD-licensed; self-host with no fee$0+$0 /mo +/emp
- Gitea Cloud FreeManaged SaaS; limited repos and users$0+$0 /mo +/emp
- Gitea Cloud BasicPer organization; expanded usage$19 /mo
- Gitea Cloud PremiumPer organization; advanced features and support$99 /mo
- Gitea EnterpriseSelf-hosted with paid support contractQuote
- · Self-hosted infrastructure and ops costs
- · No managed SLA on open-source self-hosted
- · Gitea Enterprise support contract pricing not publicly listed
Key features
- +Git hosting (single-binary)
- +Pull requests with review and protected branches
- +Issues, milestones, labels
- +Wiki and project pages
- +Gitea Actions (CI/CD, GitHub Actions compatible runners)
- +Package registry (npm, Maven, Docker, etc.)
- +Webhooks and integration triggers
- +OAuth and OIDC SSO
- +Migration tools from GitHub, GitLab, Bitbucket
Codeberg
Non-profit EU-headquartered Git hosting for ethical-tech and OSS.
Codeberg is the non-profit, EU-headquartered Git hosting platform run by Codeberg e.V. a registered German association (eingetragener Verein). The platform is Forgejo-based (powered by the Forgejo hard fork of Gitea), free for OSS, and explicitly positioned as the ethical-tech alternative to GitHub for buyers prioritizing non-profit governance, EU data residency, and FOSS values. Codeberg is funded by donations and member dues, not VC capital, and explicitly rejects business models that train on user code or sell user data. Best fit for OSS projects, EU sovereignty buyers, ethical-tech organizations, and individual developers rejecting Microsoft-owned GitHub. Trade-offs: smaller community and integration ecosystem than GitHub, no AI features (intentional), no managed enterprise tier, and resources are donation-bounded.
OSS projects, EU sovereignty buyers, ethical-tech organizations, FOSS-anchored developers, and individuals rejecting Microsoft GitHub on governance grounds.
Enterprise organizations requiring SLA-backed managed service (GitHub Enterprise or GitLab better), AI-anchored teams (Codeberg is intentionally AI-free), or buyers needing deep integration ecosystem.
Strengths
- Non-profit governance (Codeberg e.V. German registered association)
- Native EU data residency (Berlin-headquartered)
- Forgejo-based (community-governed hard fork of Gitea)
- Free for OSS projects
- Explicit no-training-on-code, no-AI-extraction policy
- Funded by donations and member dues (not VC capital)
- Strong fit for ethical-tech, OSS, and EU sovereignty buyers
Weaknesses
- Smaller community and integration ecosystem than GitHub
- No AI features (intentional; not a fit for AI-anchored teams)
- No managed enterprise tier (donation-bounded resources)
- Smaller marketplace and third-party integrations
- Limited support (community-only)
- No SLA guarantees (donation-funded infrastructure)
Pricing tiers
public- Free (OSS and personal)Free for everyone; donations encouraged$0+$0 /mo +/emp
- Sustaining MemberPer individual; voluntary support of Codeberg e.V.$5 /mo
- Organization MemberOrganizational support via Codeberg e.V. membershipQuote
- · Donation-funded; no SLA guarantees
- · No paid enterprise support tier
Key features
- +Git hosting (Forgejo-based)
- +Pull requests with code review
- +Issues, milestones, project boards
- +Wiki and project pages
- +Codeberg CI (Woodpecker CI-based)
- +Codeberg Pages (static site hosting)
- +Mirror from GitHub, GitLab, etc.
- +No tracking, no pattern extraction, no training on user code
- +EU data residency (Berlin)
- +Non-profit governance via Codeberg e.V.
Forgejo
Community-governed hard fork of Gitea, backed by Codeberg e.V.
Forgejo is the community-governed hard fork of Gitea, started in October 2022 by Gitea contributors after the 2022 formation of for-profit Gitea Limited prompted IP-rights and governance concerns. The project is hosted under Codeberg e.V. (the non-profit German association behind Codeberg) and operates on community-first governance principles. Forgejo powers Codeberg and a growing number of self-hosted instances at NGOs, public-sector deployments, and ethical-tech organizations. Best fit for buyers wanting Gitea-like functionality with community governance and IP-rights clarity. Trade-offs: very small community relative to GitHub or GitLab, no AI features (intentional), and adoption is mostly limited to ethical-tech and FOSS-aligned segments.
Ethical-tech buyers wanting Gitea-like functionality with community governance, EU public-sector deployments, NGOs, and FOSS-aligned organizations rejecting both GitHub corporate ownership and Gitea Limited.
Enterprise organizations requiring deep SSO/SCIM/compliance (GitLab Self-Managed better), AI-anchored teams (Forgejo is intentionally AI-free), or buyers wanting commercial managed SaaS (Codeberg or Gitea Cloud closer fits).
Strengths
- Community-governed hard fork with explicit IP-rights protections
- Backed by Codeberg e.V. non-profit governance
- Gitea-compatible feature set (PRs, issues, wiki, CI/CD)
- Forgejo Actions (GitHub Actions-compatible CI/CD)
- BSD-licensed (open-source)
- Strong fit for ethical-tech, public-sector, and FOSS buyers
- Active migration path from Gitea
Weaknesses
- Very small community relative to GitHub or GitLab
- No AI features (intentional; not a fit for AI-anchored teams)
- No commercial managed SaaS at Codeberg-equivalent scale beyond Codeberg itself
- Smaller integration ecosystem
- Enterprise features (SCIM, advanced audit) less mature than GitLab Self-Managed
- Adoption mostly limited to ethical-tech and FOSS-aligned segments
Pricing tiers
public- Self-hosted (open-source)BSD-licensed; self-host with no fee$0+$0 /mo +/emp
- Codeberg-hostedFree via Codeberg (donation-funded)$0 /mo
- · Self-hosted infrastructure and ops costs
- · No managed SaaS option beyond Codeberg
Key features
- +Git hosting (single-binary, Gitea-compatible)
- +Pull requests with review and protected branches
- +Issues, milestones, labels, project boards
- +Wiki and project pages
- +Forgejo Actions (GitHub Actions-compatible CI/CD)
- +Package registry (npm, Maven, Docker, etc.)
- +OAuth and OIDC SSO
- +Federation roadmap (ActivityPub)
- +Migration tools from Gitea, GitHub, GitLab
AWS CodeCommit
AWS Git hosting in active wind-down; closed to new customers July 2024.
AWS CodeCommit is the AWS-managed Git hosting service, launched 2015 as part of AWS Developer Tools (alongside CodeBuild, CodeDeploy, CodePipeline). On July 25, 2024, AWS deprecated new-customer onboarding for CodeCommit, a major industry signal that the service is in active wind-down. Existing customers can continue using the service indefinitely (no announced shutdown date), but new buyers are explicitly steered away. The product is included here for completeness and because existing CodeCommit customers face real migration decisions. Best fit going forward: no greenfield buyers. Existing customers should plan migration to GitHub Enterprise, GitLab, or self-hosted Gitea over a 12 to 24 month window.
Existing CodeCommit customers with active workloads who need a defined migration path. No greenfield use case in 2026.
Any new-customer scenario. AWS itself explicitly steers new buyers away. Greenfield AWS-anchored teams should choose GitHub Enterprise (Microsoft) or GitLab with AWS integration.
Strengths
- Native AWS IAM, KMS, CloudTrail integration for existing customers
- No per-seat fee for first 5 users; usage-based pricing beyond
- AWS region-pinned data residency
- Integrates with CodeBuild, CodeDeploy, CodePipeline (also being deprioritized)
- Existing customers can continue using indefinitely (no announced shutdown)
Weaknesses
- AWS deprecated new-customer onboarding July 25, 2024 (closed to new buyers)
- No active product investment; UI and feature set frozen
- No AI coding integration (no Copilot, no Q Developer-native repo)
- No PR review polish or branch protection sophistication of GitHub or GitLab
- Migration burden for existing customers (12 to 24 month plan recommended)
- AWS Developer Tools broader (CodeBuild, CodeDeploy, CodePipeline) also being deprioritized
Pricing tiers
public- Free Tier (legacy)First 5 active users free; 50 GB storage; 10,000 Git requests/mo$0+$0 /mo +/emp
- Per Active User (legacy)Per active user beyond 5; storage and request overages$1+$1 /mo +/emp
- New customersClosed to new-customer onboarding as of July 25, 2024/mo
- · Storage overages beyond 50 GB/month
- · Git request overages beyond 10,000/month
- · Migration costs to GitHub Enterprise, GitLab, or self-hosted alternative
Key features
- +Git hosting in AWS regions
- +IAM-based access control
- +KMS encryption at rest
- +CloudTrail audit logging
- +Pull requests with approval rules (basic)
- +CodeBuild, CodeDeploy, CodePipeline integration
- +Triggers via Lambda or SNS
- +No AI features (no Copilot, no native Q Developer repo)
Phorge
Community fork of Phabricator after Phacility wind-down.
Phorge is the community-governed open-source fork of Phabricator, started in 2022 after Phacility (the original Phabricator developer) wound down active development. The product preserves Phabricator workflows that some teams (notably Wikimedia, Blender, KDE, and various Linux distributions) depend on: Differential (pre-commit code review distinct from PR-based review), Arcanist CLI, Maniphest task tracking, and Diffusion repository browser. Best fit for teams with active Phabricator deployments who want a community-maintained continuation. Trade-offs: very small community, no AI features, no SaaS option (self-hosted only), and the broader industry has moved decisively to PR-based review workflows (which Phabricator/Phorge does not natively support).
Organizations with active Phabricator deployments (Wikimedia, Blender, KDE, various Linux distributions) wanting a community-maintained continuation of the Phabricator workflow stack.
Greenfield repo decisions (GitHub or GitLab better), teams expecting PR-based review (Phorge uses Differential pre-commit review), or AI-anchored teams (no AI features).
Strengths
- Community-governed open-source (Apache 2.0)
- Preserves Phabricator workflows (Differential, Arcanist, Maniphest)
- Pre-commit code review workflow distinct from PR-based
- Mature task tracking (Maniphest) and code browser (Diffusion)
- Active maintenance after Phacility wind-down
- Right call for organizations with deep Phabricator investment
Weaknesses
- Very small community relative to GitHub or GitLab
- No AI features (no Copilot equivalent)
- Self-hosted only (no SaaS option)
- Pre-commit review workflow does not match modern PR-based standard
- Limited integrations with modern DevOps tooling
- Adoption requires Phabricator familiarity (steep onboarding for new teams)
Pricing tiers
public- Self-hosted (open-source)Apache 2.0; self-host with no fee$0+$0 /mo +/emp
- · Self-hosted infrastructure and ops costs
- · No managed SaaS option
- · Onboarding cost for teams new to Phabricator workflow
Key features
- +Git, Mercurial, Subversion hosting (Diffusion)
- +Differential pre-commit code review
- +Arcanist CLI for review workflow
- +Maniphest task tracking
- +Phriction wiki
- +Audit and Owners (post-commit review)
- +Herald rules engine
- +OAuth and LDAP authentication
- +Drydock build resources
Frequently asked questions
The questions buyers actually ask before they sign.
How does NCSC Active Cyber Defence integrate with GitHub for UK enterprises?
Does UK GDPR affect what can be stored in a GitHub or GitLab repository?
Which code repository does UK central government use for internal systems?
Self-hosted vs cloud Git hosting, which one in 2026?
Are AI Copilot features included or extra?
Which platform is best for EU sovereignty and GDPR?
GitHub vs GitLab vs Bitbucket, when does each win?
Does monorepo support actually matter in 2026?
Large-file support (LFS): how do platforms compare?
Are open-source repo platforms safe for enterprise use?
What is the difference between Gitea, Forgejo, and Codeberg?
Is AWS CodeCommit a viable option in 2026?
How do I evaluate vendor security incident history?
Final word
Looking at a different market? See the global Code Repository / Version Control ranking, or pick another country at the top of this page.
Last updated 2026-05-18. Local pricing reverified quarterly. Found something inaccurate? Tell us.