# This is the one route here that meters per seat — and the seat count you are quoted is rarely the seat count you end up paying for. *Developer Tools — a TechBag decision guide. Last reviewed 2026-10-03.* > Seats drift because access is easy to grant and nobody audits it. Then the second meter arrives: CI minutes, build runners, monitor runs and AI assistants are all billed apart from the licence they sit beside. **The checkable fact:** GitHub, GitLab and Bitbucket all meter build minutes separately from seats. A busy pipeline can exceed the seat bill entirely — and nothing in the platform warns you before the invoice does. - Canonical: https://www.thetechbag.com/browse/devops/developer-tools - Category: [DevOps](https://www.thetechbag.com/browse/devops) - Products compared: 36 ## What developer tools actually is Thirty-six products across six jobs. Four are **platforms or source control** — where the code lives and how it ships. Seven are **code quality, security and testing** tools — the checks every pull request must pass before it merges, and the functional and load tests a release must pass before it ships. Seven are **artifacts and supply chain** — the repository every build reads from, and the scanning, blocking and curation of what it holds. Nine are **API lifecycle** tooling — clients, design, testing, and the gateways API and AI traffic run through. Five are **infrastructure, secrets and service mesh**, adjacent to the pipeline rather than inside it. Four are **AI assistants**, licensed separately from the platforms they run in. Application security appears here as a *section*, not a route: SAST, dependency and secrets scanning ship inside the SCM platforms and are compared below. Runtime and cloud posture — CNAPP, WAF — are a different purchase entirely and live on the Security and Network Security categories, cross-linked and not repeated here. **The most common mis-purchase.** The **licence unit**, and the **second meter** beside it. GitHub, GitLab, Atlassian and Postman price per user; Terraform meters managed resources; Vault meters clients; JetBrains licenses per named user or a floating pool. Then CI minutes, runners, monitor runs and AI seats are billed *apart*. Model the total, never the per-seat rate. ## Four terms, resolved These are not tiers. A DevOps platform is not source control done better — it is four purchases bundled, and whether that is cheaper depends entirely on how many of the four you would otherwise buy. ### SCM vs CI/CD Where the code lives, or what happens when it changes? ### SCM vs DevOps platform One vendor, or best-of-breed? ### IDE licensing vs seat licensing Who is the licence attached to? ### Secrets management vs configuration A credential, or a setting? The practical consequence: price the whole toolchain, not the seat. Every product here has a second meter, and the second meter is where the forecast breaks. ## The decision variables Seven variables move the shortlist. **One platform or best-of-breed.** GitLab's case is strongest when you use most of it. Using SCM and CI alone means paying for planning and scanning you do not touch. **CI/CD minutes and runner costs.** Metered separately everywhere, and frequently larger than the seat bill. Self-hosted runners trade the meter for machines you operate. **Self-hosted or SaaS.** The documented route to India residency for GitHub Enterprise Server and GitLab self-managed. It moves upgrades onto your team. **The licence unit.** Named user, concurrent, floating or per-organisation. JetBrains and Atlassian differ sharply from GitHub and GitLab here. **AI assistant bundling.** The fastest-moving variable in this category. Generous in the trial, itemised at renewal — model the tier plus the assistant. **Pipeline security scanning.** SAST, dependency and secrets scanning are in the platform tiers. Runtime and cloud posture are a different purchase entirely. **Contractors and occasional committers.** Every model treats them differently, and this is where seat counts drift furthest from headcount. ## The 36 products Every product carries one stated limitation. Prices are USD with an indicative INR conversion, tier- and term-matched where the vendor publishes one. ### GitHub Enterprise — GitHub - **Who it's for:** Teams that want the largest ecosystem, the deepest third-party integration and the hiring advantage of the tool most developers already know. - **The honest limitation:** Three meters on one platform: seats, Actions minutes and the security add-ons (Secret Protection, Code Security). The minutes line is the one that surprises — a busy monorepo pipeline can exceed the seat bill without anybody noticing until the invoice. - **Price:** Per seat + minutes — per user / month for the platform, with GitHub Actions CI metered separately in minutes and security as two add-ons since April 2025 — Secret Protection $19 and Code Security $30 per active committer per month; Enterprise Cloud or Enterprise Server for self-hosting - **Details:** https://www.thetechbag.com/github/github-enterprise ### GitHub Copilot — GitHub - **Who it's for:** Teams where the measurable win is time-to-first-draft on routine code, and where the editors in use are supported. - **The honest limitation:** A separate line at renewal, however generous the trial was. Seat counts drift upward faster than developer headcount because access is easy to grant and nobody audits it. - **Price:** Per seat, published — per user / month, published tiers, licensed separately from GitHub Enterprise; code completion, chat and agentic assistance inside the editor and the pull request - **Details:** https://www.thetechbag.com/github/github-copilot ### GitLab DevSecOps Platform — GitLab - **Who it's for:** Estates that want one vendor and one bill across the whole toolchain rather than integrating four products — and self-managed installation where India residency requires it. - **The honest limitation:** The single-platform case is strongest when you use most of it; teams using SCM and CI alone pay for planning and scanning they do not touch. Self-managed means you own the upgrades, which is a standing job. - **Price:** Per seat + minutes — per user / month across Free, Premium and Ultimate, with CI minutes metered separately; SCM, CI/CD, security scanning, packages and planning under one licence — Ultimate carries the full scanning set - **Details:** https://www.thetechbag.com/gitlab/gitlab-devsecops-platform ### GitLab Duo — GitLab - **Who it's for:** GitLab estates that want AI assistance without introducing a second vendor's tooling and a second data-handling conversation. - **The honest limitation:** An add-on rather than an inclusion — the same renewal surprise as Copilot. Capability depends on the underlying GitLab tier, so the comparison is tier-plus-Duo against a rival's equivalent. - **Price:** Per seat add-on — per user / month as an addition to a GitLab tier; AI code suggestions, chat, vulnerability explanation and merge-request summaries inside the platform - **Details:** https://www.thetechbag.com/gitlab/gitlab-duo ### Atlassian Bitbucket — Atlassian - **Who it's for:** Organisations already standardised on Jira that want source, branches and pull requests linked to the work item without an integration to maintain. - **The honest limitation:** A smaller ecosystem than GitHub or GitLab, and the strongest case assumes Jira. Atlassian pricing steps at user-count thresholds, so crossing one costs more than the extra seats suggest. - **Price:** Per user + minutes — per user / month with Pipelines build minutes metered separately; source control that shares identity, permissions and issue linking with Jira - **Details:** https://www.thetechbag.com/atlassian/atlassian-bitbucket ### Atlassian Jira — Atlassian - **Who it's for:** Engineering organisations that need the work item, the branch and the release connected — the planning half of the toolchain rather than the code half. - **The honest limitation:** Planning, not source control or CI. Pricing steps at user-count thresholds and the jump is the thing to model — crossing 100 users is not a linear increase. - **Price:** Per user, published — per user / month across Free, Standard, Premium and Enterprise, published; issue tracking and planning for software teams, linked to the branch and the deployment - **Details:** https://www.thetechbag.com/atlassian/atlassian-jira ### Postman API Client — Postman - **Who it's for:** Any team building or consuming APIs, which is nearly all of them — this is usually already in use before it is ever purchased. - **The honest limitation:** Since March 2026 the Free plan is one user and cannot create a team, so any shared collection means a paid seat. Shadow usage on personal free accounts is common and worth auditing. - **Price:** Free (1 user); Team $19/user — since March 2026: Free for one user, Solo $9/month and Team $19 per user/month billed annually, Enterprise on quote; the client most API developers already have open — requests, environments, collections and history - **Details:** https://www.thetechbag.com/postman/postman-api-client ### Postman API Design — Postman - **Who it's for:** Teams where the API contract needs agreeing before implementation — typically where a separate team consumes it. - **The honest limitation:** Design-first is a working practice more than a product: without the discipline, the tool produces schemas nobody updates. Value depends on adoption, not licences. - **Price:** In the Postman tiers — within the Postman plans (Team $19 per user/month billed annually; Enterprise on quote); schema-first API design with OpenAPI, mocking and documentation generated from the contract rather than written after it - **Details:** https://www.thetechbag.com/postman/postman-api-design ### Postman API Testing — Postman - **Who it's for:** Teams whose integration failures are found by customers rather than by the pipeline. - **The honest limitation:** Scheduled monitors draw on a per-plan allowance of monitoring requests — a second limit beside seats. It tests the API, not the user journey through the interface. - **Price:** In the Postman tiers — within the Postman plans, with monitoring requests capped per plan (1,000 a month on Free, 10,000 on paid plans); automated API tests that run in CI and on a schedule against live environments - **Details:** https://www.thetechbag.com/postman/postman-api-testing ### Postman Governance — Postman - **Who it's for:** Organisations with more APIs than anyone can list, and no consistent standard across teams. - **The honest limitation:** Governance is only as real as the enforcement: rules that warn rather than block are ignored within a quarter. Enterprise-tier only. - **Price:** Enterprise (quote) — in the Enterprise plan, quoted by Postman sales; API standards enforcement, secret detection in collections, and visibility of every API the organisation has published - **Details:** https://www.thetechbag.com/postman/postman-governance ### HashiCorp Terraform — HashiCorp - **Who it's for:** Teams whose infrastructure changes should be reviewed, versioned and repeatable rather than clicked in a console. - **The honest limitation:** The per-managed-resource meter means the bill tracks infrastructure sprawl, not team size — a resource nobody uses still counts. IBM-owned since 2025, which some estates weigh in a multi-year commitment. - **Price:** Per managed resource — HCP Terraform free up to 500 managed resources, then priced per managed resource per month (Essentials from $0.10); Terraform Enterprise self-hosted on quote — infrastructure as code with state management, policy and a run history - **Details:** https://www.thetechbag.com/hashicorp/hashicorp-terraform ### HashiCorp Vault — HashiCorp - **Who it's for:** Estates where credentials currently live in CI variables and configuration files, and somebody has finally asked who can read them. - **The honest limitation:** Client-based metering is hard to forecast, because a client is any application or workload that authenticates. Vault is also an operational commitment: it becomes a critical dependency the day you adopt it. - **Price:** Quote (per client) — quoted on active clients for HCP Vault Dedicated or Vault Enterprise; centralised secrets with dynamic credentials, rotation and an audit trail — the machine-identity half of the toolchain - **Details:** https://www.thetechbag.com/hashicorp/hashicorp-vault ### HashiCorp Consul — HashiCorp - **Who it's for:** Estates running many services across environments where discovery and service-to-service encryption are the operational gap. - **The honest limitation:** A service mesh is a serious architectural commitment with its own failure modes, and many estates adopt one before they need it. There is no HashiCorp-managed option now, so you run it yourself. If service count is modest, native platform networking is usually enough. - **Price:** Quote (Enterprise) — Community Edition free (BUSL-1.1); self-managed Consul Enterprise on quote — the managed HCP Consul Dedicated reached end of life on 12 Nov 2025; service discovery, health checking and service-mesh networking with mutual TLS between services - **Details:** https://www.thetechbag.com/hashicorp/hashicorp-consul ### JFrog Artifactory — JFrog - **Who it's for:** Teams whose builds pull from npm, Maven, PyPI or Docker Hub and break when those do — one private repository for 60+ package types, containers and AI models, SaaS or self-managed. - **The honest limitation:** SaaS Pro has no Xray scanning; that starts at Enterprise X. Consumption counts transfer as well as storage, so CI pulling the same images all day spends the allowance. JFrog lists Mumbai and Pune regions; the storage commitment is a contract question. - **Price:** $150 / month list (≈ ₹12,450) — per month list for SaaS Pro with 25 GB of storage plus transfer, then $1.25 falling to $0.75 per GB; Enterprise X from $950 a month with 125 GB; self-managed Pro X from $27,000 a year for one server. A limited-time $50-a-month Pro offer shows no end date — budget on the list price - **Details:** https://www.thetechbag.com/jfrog/jfrog-artifactory ### JFrog Xray — JFrog - **Who it's for:** Teams already on Artifactory who need to say which builds carry a vulnerable or unlicensed component, including in containers and binaries that source scanning never sees. - **The honest limitation:** It scans only what flows through Artifactory, so it is the wrong buy without the repository. Pricing Pro plus a separate scanner against Enterprise X is the honest comparison. The storage commitment for the Mumbai and Pune regions is a contract question. - **Price:** In Enterprise X (≈ ₹78,850) — included from SaaS Enterprise X (from $950 a month) and self-managed Pro X (from $27,000 a year) — not in SaaS Pro; scans the artifacts Artifactory already stores for CVEs, licences, malicious packages, containers and ML models, with an SBOM per build - **Details:** https://www.thetechbag.com/jfrog/jfrog-xray ### JFrog Advanced Security — JFrog - **Who it's for:** AppSec teams with a CVE backlog too long to fix in order, who need the findings that are actually reachable in their code ranked first. - **The honest limitation:** An add-on to an add-on: it needs Xray, which needs Enterprise X. Count contributing developers, not everyone with access, before the quote. No published price. - **Price:** Quote — quote-only add-on on Enterprise X and Enterprise+, licensed per contributing developer — 50 developers included on Enterprise X, 200 on Enterprise+; adds contextual analysis (is the CVE reachable), secrets, SAST and IaC scanning to Xray - **Details:** https://www.thetechbag.com/jfrog/jfrog-advanced-security ### JFrog Curation — JFrog - **Who it's for:** Organisations where a malicious or non-compliant package has already reached a developer laptop or a build, and scanning afterwards is no longer enough. - **The honest limitation:** It controls what passes through Artifactory; direct downloads that bypass it need Package Traffic Controller and a network control. Start policies in dry-run, or developers are blocked on day one. - **Price:** Quote — quote-only add-on on Enterprise X and Enterprise+ (and in both security bundles); blocks risky open-source packages, AI models and extensions at the moment they are requested and offers a compliant version, now with Package Traffic Controller for Zscaler, Netskope and Cloudflare - **Details:** https://www.thetechbag.com/jfrog/jfrog-curation ### SonarQube Server — Sonar - **Who it's for:** Teams that want a quality gate on every pull request and whose code cannot leave their own infrastructure — the self-managed route, on infrastructure you control. - **The honest limitation:** Priced by lines of code, so generated code and monorepos push you up a band. Enterprise adds the legacy languages (COBOL, PL/I, APEX) and AI CodeFix; check your languages before choosing Developer. - **Price:** Quote — per instance, per year, by lines of code — Developer, Enterprise and Data Center editions; Sonar no longer publishes the prices, and third-party figures are old list prices. Dependency scanning is Advanced Security, a separate subscription - **Details:** https://www.thetechbag.com/sonar/sonarqube-server ### SonarQube Cloud — Sonar - **Who it's for:** Teams that want the same quality gate without running a server, and whose code may be stored in the EU or US. - **The honest limitation:** Data is stored in the EU or US only — chosen at sign-up and fixed — so it cannot meet an India storage requirement; that is SonarQube Server. The US region needs Enterprise. - **Price:** $34 / month (≈ ₹2,822) — a month on Team for up to 100k lines of code (read 30 Sep 2026), up to 1.9M lines; free up to 50k lines and 5 members; Enterprise custom. Wired into GitHub, GitLab, Bitbucket Cloud and Azure DevOps - **Details:** https://www.thetechbag.com/sonar/sonarqube-cloud ### SonarQube Advanced Security — Sonar - **Who it's for:** AppSec teams already running SonarQube who want dependency risk and SBOMs in the same pull-request check rather than a second tool. - **The honest limitation:** Sonar’s pricing page and documentation disagree on whether Cloud Team includes it — get the answer in writing. No published price. - **Price:** Quote — additional subscription on SonarQube Server Enterprise and SonarQube Cloud Enterprise; adds dependency scanning with malicious-package detection, licence policy and SBOM export, plus taint analysis through libraries - **Details:** https://www.thetechbag.com/sonar/sonarqube-advanced-security ### Gitar — Sonar - **Who it's for:** Teams where pull requests wait for human review, who want an AI reviewer that comments on and fixes changes before a person looks. - **The honest limitation:** AI review reads intent in a diff; it does not replace rule-based analysis of the whole codebase. Processing defaults to the US; EU, Singapore, Australia and Japan instances are in beta for Enterprise — not India. - **Price:** $20 / user / month (≈ ₹1,660) — per user per month billed annually on Core ($40 on Pro), up to 50 users; Enterprise is priced per pull request and adds SSO and connections to self-hosted Git servers (Gitar itself runs hosted). AI code review on GitHub, GitLab, Bitbucket and Azure DevOps; a Sonar company since May 2026 - **Details:** https://www.thetechbag.com/sonar/gitar ### Sonatype Nexus Repository — Sonatype - **Who it's for:** Teams that want one cache for every package their builds pull, from the company that runs Maven Central — free to start, with a published Pro price. - **The honest limitation:** Community Edition pauses new components past 40,000 or 100,000 requests a day. Sonatype’s docs list Mumbai and Hyderabad storage regions for the cloud; confirm yours in writing. - **Price:** $1,950 / year — a year for Pro Cloud plus consumption above 25 GB ($1.10/GB/month to 1,000 GB); Pro Self-Hosted $7,500 a year with 50K components included; the free Community Edition is self-hosted and capped at 40,000 components - **Details:** https://www.thetechbag.com/sonatype/sonatype-nexus-repository ### Sonatype Repository Firewall — Sonatype - **Who it's for:** Estates where a malicious package has reached a build, and blocking at the proxy matters more than scanning afterwards. - **The honest limitation:** Firewall Pro is not for Nexus or air-gapped estates — those need the quoted self-hosted edition. Cloud storage regions are not documented. - **Price:** $4,800 / year — a year for Firewall Pro — npm, Maven, PyPI and NuGet, for repositories other than Nexus, internet-connected only; the self-hosted Repository Firewall (15+ formats, air-gapped, container protection) is quoted - **Details:** https://www.thetechbag.com/sonatype/sonatype-repository-firewall ### Sonatype Guide — Sonatype - **Who it's for:** Teams whose AI coding assistants choose package versions, and security teams that need SCA, policy and SBOMs from one product. - **The honest limitation:** Credits are not defined publicly, so model usage in a trial. Cloud storage regions are not documented. - **Price:** $1,200 / year — a year for Pro (5,000 credits); a free tier with 500 credits; Enterprise by quote with the governance, policy and SBOM scope formerly sold as Lifecycle and SBOM Manager — which new customers can no longer buy - **Details:** https://www.thetechbag.com/sonatype/sonatype-guide ### Kong Konnect — Kong - **Who it's for:** Teams running APIs across clouds and their own clusters who want one control plane for gateways, portals and the API catalogue, with a published price to start. - **The honest limitation:** Kong Gateway’s open-source line stopped at 3.9.x. Konnect’s India geo keeps control-plane data in-geo, but Kong does not name the city or cloud region, and authentication, billing and usage are shared across geos. - **Price:** From $25 / month (≈ ₹2,075) — a month per serverless control plane on Konnect Plus; hybrid $200 and Dedicated Cloud Gateways $500 per control plane plus $0.15/GB; 1M API requests included, then $200 a month per extra million (max 10M); Enterprise and the fully self-hosted Gateway Enterprise are quoted - **Details:** https://www.thetechbag.com/kong/kong-konnect ### Kong AI Gateway — Kong - **Who it's for:** Teams putting LLM, MCP and agent calls behind the same rate limits, PII controls and cost reporting as their APIs. - **The honest limitation:** AI Gateway 2.0 (September 2026) replaced the plugin model; the V1 AI plugins become opt-in from Gateway 3.18. Plus caps at five models. - **Price:** $100 / model / month (≈ ₹8,300) — a month per model proxied on Konnect Plus, up to five models; the AI enterprise plugins are an add-on on Plus and included on Enterprise, which is quoted - **Details:** https://www.thetechbag.com/kong/kong-ai-gateway ### Kong Insomnia — Kong - **Who it's for:** Developers who want an API client that can keep collections local or in Git rather than in a vendor cloud. - **The honest limitation:** Cloud Sync is stored in GCP US Central, end-to-end encrypted; keep collections in Local Vault or your own Git if they must stay in India. - **Price:** $12 / user / month (≈ ₹996) — per user / month for Pro, $45 for Enterprise; Essentials is free; an open-source desktop client for REST, GraphQL, gRPC, WebSocket and MCP, with local, Git or end-to-end-encrypted cloud storage - **Details:** https://www.thetechbag.com/kong/kong-insomnia ### Kong Mesh — Kong - **Who it's for:** Platform teams that need mutual TLS and traffic policy across Kubernetes and VMs in more than one zone. - **The honest limitation:** No public price. Self-managed, so data stays where you run it; Konnect Mesh Manager follows the Konnect geo. - **Price:** Quote — quoted, licensed by data plane proxies; an enterprise service mesh on the CNCF Kuma project for Kubernetes and VMs across zones; without a licence it runs 10 proxies for 30 days - **Details:** https://www.thetechbag.com/kong/kong-mesh ### OpenText Fortify (SAST · DAST · SCA · Fortify on Demand) — OpenText - **Who it's for:** AppSec teams that want static, dynamic and composition testing from one vendor — SAST across 44+ languages and 350+ frameworks — run on their own servers or as a service with an expert review included. - **The honest limitation:** No public price for SAST, DAST or an Assessment Unit, and Remediation Aviator costs 1 AU per app on top. Fortify on Demand lists the Americas, Europe, Australia and Singapore, not India — self-host it to keep code here. - **Price:** Quote — quote-only: self-hosted SAST, DAST and SCA licences are quoted, and Fortify on Demand is bought as prepaid Assessment Units valid 12 months with no rollover (a year of static scans on one app is 4 AUs); Fortify SCA has a free tier - **Details:** https://www.thetechbag.com/opentext/opentext-fortify ### OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core) — OpenText - **Who it's for:** Teams that must prove an application holds its peak before release — web, API, SAP, Oracle E-Business and 180+ protocols in all — on their own servers or from Core’s cloud load generators. - **The honest limitation:** Load testing, not a pull-request check; VuGen scripts run only on OpenText engines, though JMeter and Gatling scripts stay portable, and Core names no hosting region. OpenText classes its DevOps testing line as non-core and is divesting non-core units — ask about the roadmap. - **Price:** Quote — by virtual user — permanent, time-limited or 24-hour Virtual User Flex Days — with protocols sold in bundles; every paid edition is quoted and Core SaaS is usage-based; a free Community licence runs 50 virtual users - **Details:** https://www.thetechbag.com/opentext/opentext-performance-engineering ### OpenText Functional Testing (formerly UFT One) — OpenText - **Who it's for:** QA teams automating regression tests across web, desktop, mobile, SAP, Salesforce, Citrix and 3270/5250 mainframe screens — 200+ technologies by OpenText’s count — in VBScript or Python. - **The honest limitation:** Tests are built on Windows and lean on its own object repositories, so scripts do not move easily; the SaaS edition lists no India region. OpenText classes its DevOps testing line as non-core and is divesting non-core units — ask about the roadmap. - **Price:** Quote — seat licences tied to one Windows machine, or concurrent licences drawn from an AutoPass server pool, both quoted; the AI tier and the Aviator add-on are licensed on top; every download carries a 30-day trial seat - **Details:** https://www.thetechbag.com/opentext/opentext-functional-testing ### Layer7 API Gateway (Broadcom) — Broadcom - **Who it's for:** Enterprises securing APIs in front of on-premises and legacy back ends, including ESB and SOA services. - **The honest limitation:** Quote-only, and its SaaS developer portal region is not published; the gateway is self-hosted rather than a managed cloud service. - **Price:** Quote — quoted; gateway licences work across appliance, VM and container form factors; version 11.2 (Nov 2025) with a web Policy Manager and post-quantum key exchange; 11.1 support extended to Oct 2027 - **Details:** https://www.thetechbag.com/broadcom/broadcom-layer7-api-gateway ### Red Hat Ansible Automation Platform — IBM - **Who it's for:** Ops teams standardising configuration, patching and network automation across Linux, Windows and network gear, and teams already holding Red Hat subscriptions. - **The honest limitation:** Agentless and push-based: strong for configuration and day-2 change, weaker than Terraform for provisioning state (IBM owns both); no list price, so ask what the quote counts. - **Price:** Quote — subscription quoted by Red Hat, Standard (business hours) or Premium (24x7) support; self-managed, managed application in your cloud, or Red Hat-managed service; AAP 2.6 - **Details:** https://www.thetechbag.com/ibm/ibm-red-hat-ansible-automation-platform ### Snowflake CoCo (formerly Cortex Code) — Snowflake - **Who it's for:** Data engineers working in Snowflake, dbt or Airflow who want an agent that already knows their schemas, roles and governance policies. - **The honest limitation:** Token-metered, so cost tracks how heavily people use it rather than headcount, and it is built for data work rather than general application code. Model choice changes the bill by an order of magnitude. - **Price:** Token-metered — billed on model tokens in AI credits inside a Snowflake account (rates per model in Snowflake’s consumption table); a standalone CoCo CLI subscription exists, price not published - **Details:** https://www.thetechbag.com/snowflake/snowflake-coco ### F5 NGINX One (NGINX Plus) — F5 - **Who it's for:** Teams that already run NGINX and want a supported load balancer, reverse proxy and API gateway with a WAF and one console across VMs and Kubernetes. - **The honest limitation:** Outside the marketplace there is no public price. The WAF was renamed from NGINX App Protect, so older quotes and docs use the old name, and NGINX had an exploited flaw in May 2026 (CVE-2026-42945, fixed in NGINX Plus after R36 / OSS 1.30.1). - **Price:** $0.50 / hour (AWS) — NGINX Plus Standard on AWS Marketplace is $0.50 an hour in software fees after a 30-day trial (Developer $0.14); NGINX One otherwise quoted, bundling NGINX Plus, F5 WAF for NGINX, the Ingress Controller, Gateway Fabric and the SaaS NGINX One Console - **Details:** https://www.thetechbag.com/f5/f5-nginx-one ### Databricks Genie Code (formerly Databricks Assistant) — Databricks - **Who it's for:** Data engineers and data scientists whose tables, pipelines and models live in Databricks and are governed through Unity Catalog. - **The honest limitation:** Built for data work inside a Databricks workspace, not general application code; the terminal CLI is still Beta. Clusters and warehouses the agent starts bill on their own SKUs, and Agent mode, now the only pane mode, leaves the India Geo for processing. - **Price:** 150 DBUs free, then $0.07 / DBU — per user / month: 150 DBUs of usage free, then Serverless Real-time Inference DBUs at $0.07 in US East and $0.074 in AWS Mumbai or Azure Central India, 25% off until 31 Jan 2027; compute it triggers is billed apart. India Geo: chat and cell actions process in-Geo, Agent mode needs cross-Geo processing - **Details:** https://www.thetechbag.com/databricks/databricks-genie-code ## Why each constraint rules out what it does The full narrowing logic, as prose. Nothing here is hidden behind an interaction. **one platform.** Rules out Atlassian Bitbucket, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Cloud, SonarQube Advanced Security, Gitar, Sonatype Nexus Repository, Sonatype Repository Firewall, Sonatype Guide, Kong Konnect, Kong AI Gateway, Kong Insomnia, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom), Red Hat Ansible Automation Platform and F5 NGINX One (NGINX Plus) — one layer of the toolchain, not the whole platform. That leaves GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Jira, Snowflake CoCo (formerly Cortex Code) and Databricks Genie Code (formerly Databricks Assistant). **pipeline scanning.** Rules out GitHub Copilot, GitLab Duo, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, HashiCorp Terraform, HashiCorp Consul, JFrog Artifactory, Gitar, Sonatype Nexus Repository, Kong Konnect, Kong AI Gateway, Kong Insomnia, Kong Mesh, OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom), Red Hat Ansible Automation Platform, Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant) — no pipeline security scanning; Atlassian Bitbucket, Postman Governance, HashiCorp Vault, JFrog Xray, JFrog Curation, Sonatype Repository Firewall and Sonatype Guide — one scanning type only, not the SAST + dependency + secrets set. That leaves GitHub Enterprise, GitLab DevSecOps Platform, JFrog Advanced Security, SonarQube Server, SonarQube Cloud, SonarQube Advanced Security and OpenText Fortify (SAST · DAST · SCA · Fortify on Demand). **API tooling.** Rules out GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Bitbucket, Atlassian Jira, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Cloud, SonarQube Advanced Security, Gitar, Sonatype Nexus Repository, Sonatype Repository Firewall, Sonatype Guide, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Red Hat Ansible Automation Platform, Snowflake CoCo (formerly Cortex Code) and Databricks Genie Code (formerly Databricks Assistant) — not API-lifecycle tooling. That leaves Postman API Client, Postman API Design, Postman API Testing, Postman Governance, Kong Konnect, Kong AI Gateway, Kong Insomnia, Layer7 API Gateway (Broadcom) and F5 NGINX One (NGINX Plus). **infrastructure and secrets.** Rules out GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Cloud, SonarQube Advanced Security, Gitar, Sonatype Nexus Repository, Sonatype Repository Firewall, Sonatype Guide, Kong Konnect, Kong AI Gateway, Kong Insomnia, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom), Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant) — not infrastructure or secrets tooling. That leaves HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, Kong Mesh and Red Hat Ansible Automation Platform. **artifact management.** Rules out GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, SonarQube Server, SonarQube Cloud, SonarQube Advanced Security, Gitar, Kong Konnect, Kong AI Gateway, Kong Insomnia, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom), Red Hat Ansible Automation Platform, Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant) — not artifact management or supply-chain control. That leaves JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, Sonatype Nexus Repository, Sonatype Repository Firewall and Sonatype Guide. **code quality checks.** Rules out GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, Sonatype Nexus Repository, Sonatype Repository Firewall, Sonatype Guide, Kong Konnect, Kong AI Gateway, Kong Insomnia, Kong Mesh, Layer7 API Gateway (Broadcom), Red Hat Ansible Automation Platform, Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant) — not a code quality, security or testing tool. That leaves SonarQube Server, SonarQube Cloud, SonarQube Advanced Security, Gitar, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core) and OpenText Functional Testing (formerly UFT One). **per-seat pricing.** Rules out HashiCorp Terraform, JFrog Artifactory, JFrog Xray, SonarQube Cloud, Sonatype Nexus Repository, Kong Konnect, Kong AI Gateway, Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant) — consumption-metered: the bill tracks resources, not people; HashiCorp Vault, HashiCorp Consul, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Advanced Security, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom) and Red Hat Ansible Automation Platform — quote-only, and metered on clients or services rather than seats. That leaves GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, Gitar, Sonatype Repository Firewall, Sonatype Guide and Kong Insomnia. **no metered minutes.** Rules out GitHub Enterprise, GitLab DevSecOps Platform and Atlassian Bitbucket — CI minutes are metered separately and routinely exceed the seat bill. That leaves GitHub Copilot, GitLab Duo, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Cloud, SonarQube Advanced Security, Gitar, Sonatype Nexus Repository, Sonatype Repository Firewall, Sonatype Guide, Kong Konnect, Kong AI Gateway, Kong Insomnia, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom), Red Hat Ansible Automation Platform, Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant). **published pricing.** Rules out HashiCorp Vault, HashiCorp Consul, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Advanced Security, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom) and Red Hat Ansible Automation Platform — quote-only. That leaves GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, HashiCorp Terraform, JFrog Artifactory, JFrog Xray, SonarQube Cloud, Gitar, Sonatype Nexus Repository, Sonatype Repository Firewall, Sonatype Guide, Kong Konnect, Kong AI Gateway, Kong Insomnia, Snowflake CoCo (formerly Cortex Code), F5 NGINX One (NGINX Plus) and Databricks Genie Code (formerly Databricks Assistant). **self-hosting.** Rules out GitHub Copilot, Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, SonarQube Cloud, Gitar, Sonatype Guide, Kong Insomnia, Snowflake CoCo (formerly Cortex Code) and Databricks Genie Code (formerly Databricks Assistant) — SaaS only, so India residency cannot be met by deployment choice. That leaves GitHub Enterprise, GitLab DevSecOps Platform, GitLab Duo, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, SonarQube Server, SonarQube Advanced Security, Sonatype Nexus Repository, Sonatype Repository Firewall, Kong Konnect, Kong AI Gateway, Kong Mesh, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Layer7 API Gateway (Broadcom), Red Hat Ansible Automation Platform and F5 NGINX One (NGINX Plus). **AI assistance.** Rules out Atlassian Bitbucket, Atlassian Jira, Postman API Client, Postman API Design, Postman API Testing, Postman Governance, HashiCorp Terraform, HashiCorp Vault, HashiCorp Consul, JFrog Artifactory, JFrog Xray, JFrog Advanced Security, JFrog Curation, SonarQube Advanced Security, Sonatype Nexus Repository, Sonatype Repository Firewall, Kong Konnect, Kong AI Gateway, Kong Insomnia, Kong Mesh, Layer7 API Gateway (Broadcom) and F5 NGINX One (NGINX Plus) — no AI assistant documented for this product. That leaves GitHub Enterprise, GitHub Copilot, GitLab DevSecOps Platform, GitLab Duo, SonarQube Server, SonarQube Cloud, Gitar, Sonatype Guide, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand), OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core), OpenText Functional Testing (formerly UFT One), Red Hat Ansible Automation Platform, Snowflake CoCo (formerly Cortex Code) and Databricks Genie Code (formerly Databricks Assistant). **an Indian region.** Rules nothing out on published terms. It flags GitHub Enterprise — No Indian SaaS region is documented, GitHub Copilot — No Indian region is documented and there is no self-hosted option, GitLab DevSecOps Platform — No Indian SaaS region is documented, GitLab Duo — No Indian SaaS region is documented, Atlassian Bitbucket — No Indian region is documented and there is no self-hosted option, Atlassian Jira — No Indian region is documented and there is no self-hosted option, Postman API Client — No Indian region is documented and there is no self-hosted option, Postman API Design — No Indian region is documented and there is no self-hosted option, Postman API Testing — No Indian region is documented and there is no self-hosted option, Postman Governance — No Indian region is documented and there is no self-hosted option, HashiCorp Terraform — No Indian SaaS region is documented, HashiCorp Vault — No Indian SaaS region is documented, HashiCorp Consul — No Indian SaaS region is documented, SonarQube Server — No Indian SaaS region is documented, SonarQube Cloud — No Indian region is documented and there is no self-hosted option, SonarQube Advanced Security — No Indian SaaS region is documented, Gitar — No Indian region is documented and there is no self-hosted option, Sonatype Repository Firewall — No Indian SaaS region is documented, Sonatype Guide — No Indian region is documented and there is no self-hosted option, Kong Insomnia — No Indian region is documented and there is no self-hosted option, Kong Mesh — No Indian SaaS region is documented, OpenText Fortify (SAST · DAST · SCA · Fortify on Demand) — No Indian SaaS region is documented, OpenText Performance Engineering (formerly LoadRunner: Professional · Enterprise · Core) — No Indian SaaS region is documented, OpenText Functional Testing (formerly UFT One) — No Indian SaaS region is documented, Layer7 API Gateway (Broadcom) — No Indian SaaS region is documented, Red Hat Ansible Automation Platform — No Indian SaaS region is documented, Snowflake CoCo (formerly Cortex Code) — No Indian region is documented and there is no self-hosted option, F5 NGINX One (NGINX Plus) — No Indian SaaS region is documented and Databricks Genie Code (formerly Databricks Assistant) — No Indian region is documented and there is no self-hosted option — marked, not removed. **The minutes are the surprise, not the seats.** GitHub Actions, GitLab CI and Bitbucket Pipelines all meter build minutes separately from the seat licence. A busy monorepo with a matrix build can exceed its seat bill without anybody noticing until the invoice — and the fix is pipeline discipline, not a different vendor. **Seat counts drift upward, quietly.** Access is easy to grant and nobody audits it. Contractors, occasional committers and people who left the team last quarter all count. Audit against actual commit activity before every renewal; it is the cheapest saving in this route. **AI assistants are bundled in the trial, itemised at renewal.** Copilot and GitLab Duo are both separate licences however the pilot was framed. Model the platform tier PLUS the assistant when comparing vendors, because that is the number you will pay in year two. **JetBrains is carried but not ranked here.** TechBag sells JetBrains licences and it belongs in this route. There are no intel pages yet, so it is named and not ranked rather than silently omitted. Its licence unit differs materially from everything carded here — per named user or a floating pool, which changes the maths for teams with part-time or shift-based developers. ## Fourteen situations, and what each one buys If one of these is your sentence, the shortlist is short. ### We want one vendor for the whole toolchain **Shortlist:** GitLab DevSecOps Platform, GitHub Enterprise **Why:** SCM, CI, packages, scanning and planning under one licence and one renewal conversation. **Trade-off:** You pay for the whole platform whether or not you use the whole platform. Price it against what you would otherwise buy. ### Repository data cannot leave India **Shortlist:** GitLab DevSecOps Platform (self-managed), GitHub Enterprise Server, HashiCorp Vault (self-hosted) **Why:** Self-hosting is the documented residency route — no vendor here publishes an Indian SaaS region. **Trade-off:** Somebody owns upgrades, backups and availability. That role is the real cost, and it is usually unassigned at signature. ### CI cost more than the seat licences last month **Shortlist:** GitLab DevSecOps Platform, GitHub Enterprise **Why:** Both support self-hosted runners, which trades the per-minute meter for machines you already pay for. **Trade-off:** Self-hosted runners are infrastructure you now maintain and secure — and a compromised runner is a supply-chain problem. ### Everything already runs through Jira **Shortlist:** Atlassian Bitbucket, Atlassian Jira **Why:** Shared identity, permissions and issue linking with no integration to build or maintain. **Trade-off:** Smaller ecosystem than GitHub or GitLab, and Atlassian pricing steps hard at user-count thresholds. ### Nobody can list the APIs we have published **Shortlist:** Postman Governance, Postman API Design **Why:** An inventory of every published API plus enforceable standards across teams. **Trade-off:** Enterprise tier, and governance that warns rather than blocks is ignored within a quarter. ### Credentials live in CI variables and config files **Shortlist:** HashiCorp Vault **Why:** Centralised secrets with dynamic credentials, rotation and an audit trail of who read what. **Trade-off:** Client-based metering is hard to forecast, and Vault becomes critical infrastructure the day you adopt it. ### Infrastructure changes are clicked in a console **Shortlist:** HashiCorp Terraform **Why:** Infrastructure as code with state, policy and a reviewable run history. **Trade-off:** Per managed resource, so the bill tracks infrastructure sprawl rather than team size — unused resources still count. ### A public registry outage broke our builds **Shortlist:** JFrog Artifactory **Why:** A private repository caches every package and image the build pulls, so builds keep working when npm or Docker Hub does not. **Trade-off:** Consumption bills storage plus transfer above an allowance; measure a month of real pulls before choosing a tier. ### A malicious package reached a developer laptop **Shortlist:** JFrog Curation, JFrog Advanced Security **Why:** Curation blocks the package at the moment of request; Advanced Security ranks what is already in by whether it is reachable. **Trade-off:** Both are quoted Enterprise X add-ons, and Curation only sees traffic that passes through the repository. ### Bugs and security flaws are found after merge, not before **Shortlist:** SonarQube Cloud, SonarQube Server **Why:** A quality gate fails new code that breaks the agreed rules at the pull request, where the fix is a comment rather than a hotfix. **Trade-off:** Priced by lines of code, and Cloud stores data in the EU or US — self-host Server if code must stay in India. ### Pull requests wait days for a reviewer **Shortlist:** Gitar **Why:** An AI reviewer comments on, fixes and validates each pull request before a person looks at it. **Trade-off:** It reads the change, not the whole codebase — pair it with static analysis rather than replacing it. ### Our free Nexus instance stopped accepting new components **Shortlist:** Sonatype Nexus Repository **Why:** Community Edition pauses new components past 40,000 or 100,000 requests a day since December 2025; Pro removes the cap. **Trade-off:** Pro Self-Hosted is $7,500 a year with 50K components included — count your estate before choosing a tier. ### LLM and agent calls bypass every control our APIs go through **Shortlist:** Kong AI Gateway, Kong Konnect **Why:** An AI gateway applies rate limits, PII redaction and cost reporting to LLM, MCP and agent traffic, on the same platform as the API gateway. **Trade-off:** Konnect Plus bills $100 a month per model and stops at five; beyond that, Enterprise is quoted. ### We are deciding whether to licence an AI assistant **Shortlist:** GitHub Copilot, GitLab Duo **Why:** Both are per-seat add-ons to their platform; the honest comparison is platform tier plus assistant, not assistant alone. **Trade-off:** A separate line at renewal however the trial was framed, and seat counts drift upward faster than headcount. ## At scale This route scales by developers — and by pipeline volume, which is not the same number. ### 1 developers — Under 20 developers - Free tiers are genuinely capable here - CI minutes rarely exceed the allowance - One platform is simpler than a toolchain **The test:** Prove the minutes against your real pipeline before paying. ### 2 developers — 20–100 developers - Seat drift starts — audit against commit activity - CI minutes become a visible line - Scanning tiers start to matter **The test:** Audit seats before every renewal. It is the cheapest saving here. ### 3 developers — 100–500 developers - Self-hosted runners usually pay for themselves - Atlassian threshold jumps become material - AI assistant seats need a policy **The test:** Model the tier jump, not the per-seat rate. ### 4 developers — 500+ developers - Self-hosting for residency and control becomes credible - Platform-versus-toolchain is a strategic decision - Secrets and IaC become critical infrastructure **The test:** Name the owner for the self-hosted upgrade path before choosing it. Where a vendor does not publish list pricing, this page says so rather than implying a figure. ## Getting out Git is portable. Everything built around it is not. **Repositories and history** — Git is distributed by design — a clone is a complete copy *(Fully portable)* **Pipeline definitions** — Vendor-specific YAML, rewritten for the new platform *(Rebuilt)* **Issues, boards and pull-request history** — Exportable via API; the discussion context rarely survives intact *(Partly portable)* **Secrets and IaC state** — Vault and Terraform state are portable with planning, catastrophic without it *(Plan it first)* The practical consequence: the code is never the lock-in. The pipelines, the scanning configuration and the accumulated review history are, and none of them appear in a switching-cost estimate. ## What it costs Per seat, plus the meters beside it, in USD and INR. ### Do you already own one? Four checks, in the order most likely to return a yes. - **GitHub or GitLab free tiers — Both are genuinely capable for small teams.** They **stop** at required reviewers, advanced permissions, scanning and support — the compliance features, not the coding ones. - **Your Atlassian licence — Bitbucket may already be in the bundle.** Worth checking before buying a second SCM — particularly where Jira is already the system of record. - **Postman free accounts — Almost certainly already in use across your teams.** Shadow usage on personal accounts is the norm. Audit it, then decide the tier. - **Open-source CI — Jenkins, Drone and Woodpecker are real options.** Costs infrastructure and an owner instead of a per-minute meter — the same trade as observability. The free tiers here are unusually strong. The paid case is compliance, support and scale rather than capability. ### What the rest actually cost One meter you expect, and several you do not. ### What isn't in the licence price - **CI/CD minutes and runners.** Metered separately everywhere, and routinely larger than the seat bill on a busy pipeline. - **AI assistant seats.** Copilot and Duo are separate licences however generous the trial was. - **Self-hosted operational burden.** Upgrades, backups, availability and runner security. A role, not a line item. - **Seats for people who have left.** Access is easy to grant and nobody audits it. Check against commit activity, not the directory. ## What goes wrong Five ways this purchase goes wrong. Four of them are meters nobody modelled. - **CI/CD minutes exceeding the seat bill.** A matrix build on every push, on a busy monorepo. The fix is pipeline discipline and self-hosted runners, not a different vendor. - **Seats counted per repository access rather than per active developer.** Contractors, occasional committers and people who left all count. Audit against commit activity before every renewal. - **Self-hosted chosen for residency, then nobody owns the upgrades.** The residency requirement is met on day one and the platform is three versions behind by year two. Name the owner at signature. - **The AI assistant licensed separately at renewal.** Bundled generously in the trial, itemised afterwards. Compare platform tier plus assistant, not the tier alone. - **Atlassian tier jumps at user-count thresholds.** Crossing a threshold is not a linear increase. Model the jump before hiring past it. ## Questions this guide answers ### GitHub or GitLab — which is right? GitHub has the larger ecosystem, the deepest third-party integration and the hiring advantage of being the tool most developers already know. GitLab's pitch is one platform and one licence across SCM, CI, scanning, packages and planning, with self-managed installation as a first-class option where residency requires it. The honest test is how much of the platform you would otherwise buy separately: if the answer is most of it, GitLab's economics are strong; if you want best-of-breed at each layer, GitHub plus a toolchain is the more common shape. ### Why did our CI bill exceed our licence cost? Because they are different meters. GitHub Actions, GitLab CI and Bitbucket Pipelines all bill build minutes separately from seats, and a busy monorepo running a matrix build on every push consumes minutes at a rate nothing in the platform warns you about. The fixes are pipeline discipline — caching, path filters, fewer matrix legs — and self-hosted runners, which trade the per-minute meter for machines you already operate and must now secure. ### Can we keep repository data in India? No vendor on this page documents an Indian SaaS region. The documented route is self-hosting: GitLab self-managed and GitHub Enterprise Server both run entirely on your own infrastructure, as does HashiCorp Vault. That meets the residency requirement and moves upgrades, backups and availability onto your team — which is a named role rather than a line item, and the thing most estates leave unassigned at signature. ### Is an AI coding assistant worth licensing? The measurable win is time-to-first-draft on routine code, and it is real for teams working in supported editors and languages. The commercial trap is the renewal: GitHub Copilot and GitLab Duo are both separate per-seat licences however the pilot was framed, so compare platform tier plus assistant rather than the tier alone. And audit the seats — assistant access is easy to grant and drifts upward faster than developer headcount. ### Do you sell JetBrains? Yes. TechBag carries JetBrains licences and they belong in this route; there are no intel pages for them yet, so JetBrains is named here and not ranked rather than omitted. The commercially important point is that its licence unit differs from everything carded on this page: per named user, or a floating pool shared across a team. For estates with contractors, shift work or part-time developers, a floating pool can be materially cheaper than per-seat SCM licensing — and the two cannot be compared line-for-line. Ask us to quote it alongside any shortlist here. --- *Vendor-neutral. Nothing gated. Figures marked [TechBag to confirm] are team-owned and deliberately not guessed.* *TechBag — India-based software reseller and advisory. https://www.thetechbag.com/browse/devops/developer-tools*