The Snyk Terms of Service are the standard agreement between Snyk and its customers. They apply “irrespective of whether you subscribe to” a paid version, bought directly or through a Channel Partner, or to a free trial, evaluation or free version, including free use of a paid version through Snyk’s open source projects. Some sections, such as the performance warranty and the SLA, do not apply to free and evaluation use.[1] A customer accepts the Terms by clicking to agree or “by signing an Order Form which references this Agreement”.[1]
The version retrieved is dated 2026-09-18. The archive lists earlier versions dated 2026-08-04, 2026-03-09, 2025-03-17, 2024-12-04, 2024-02-13 and 2020-04-08, as well as Channel Partner Customer Terms dated 2021-10-07.[1][2]
Editions
The Terms treat three kinds of use differently.[1]
| Use | Term | Notable terms |
|---|---|---|
| Free version (including Open Source Projects) | Until either party ends it | Snyk may terminate “at any time and for any reason, including without notice to you”; no Performance Warranty |
| Evaluation | Evaluation Period, 30 days unless Snyk designates otherwise | Internal testing only; Snyk may end it on 3 days’ notice |
| Paid version | Term in the Order Form or Service Plan; 1 year by default | Auto-renews for 1-year terms; fees non-refundable |
Catalog proof: Free accounts can be terminated by Snyk at any time, Evaluation Period defaults to 30 days and is for internal testing only, Paid terms renew annually unless notice is given 30 days before end. The product documentation describes the trial as a “self-serve 14-day trial” that samples Enterprise features with some unavailable.[5]
Metrics
The Terms do not set prices. They define the units that Order Forms and Service Plans use. The central definition is the Subscription Allocation: “the limits on the use of the Services pursuant to an Order Form or Service Plan, whichever is applicable, including test limits and any other limits concerning the number of Contributing Developers, Credits or Code Assets”.[1] Catalog proof: Snyk verifies usage against the Subscription Allocation.
- Contributing Developer: an individual acting for the customer “who has contributed to the Code Asset during a 90-day rolling period by modifying, programming, or testing the Code Asset”.[1]
- Credits: “the consumption-based units that form part of your Subscription Allocation”.[1]
- Code Asset: “any source code repository, code file, configuration file, web application, API, container image, cloud asset, or similar software asset” relating to the customer’s software projects.[1]
- Users: individuals acting for the customer or its Affiliates “who are permitted by you to access the Services”.[1]
Counting / floors
Right to use
Section 1 grants “a non-exclusive, non-transferable, non-assignable (subject to Section 11.9), non-sublicensable right” to use the Services, Support and Documentation during the Term “solely for the Permitted Purpose”.[1] For paid use, the Permitted Purpose is use “solely for your internal business operations to support the development, maintenance, and functionality of the Code Asset”. For an Evaluation, it is internal testing to assess suitability.[1] Catalog proof: Use is limited to internal business operations on owned Code Assets.
Restrictions
Section 2 lists the restrictions. Among them, the customer may not use the Services on “any Code Asset that is not owned by you or your Affiliates, or that you do not have a right to access or use”. It may not make the Services available to third parties, use them “to provide business process outsourcing services to third parties (e.g., as a service bureau)”, benchmark with them, or use them as or for a competitor.[1] “A breach of any of the foregoing restrictions is deemed to be a material breach of this Agreement.”[1] Catalog proof: No service bureau, benchmarking or competitor use.
For licence managers, the Code Asset restriction matters most for consultancies and outsourcers. Scanning a client’s code requires a right to access or use that code, and providing scanning as a service to third parties is a listed restriction.[1]
Usage verification and On-Demand Consumption
Section 6.1 is headed “Subscription Fees and Audit”. It states that “Snyk verifies its customers’ use of the Services to ensure compliance with the Subscription Allocation”. If verification shows use above the allocation, Snyk “may invoice you periodically in arrears for the associated additional Subscription Fees at its then current rates”.[1] The Terms do not set out an on-site audit procedure, notice period or auditor; the clause relies on Snyk’s own verification of use of the hosted service.
Credits
Section 6.2 governs credits. “Unless otherwise stated on an applicable Order Form, all Credits must be used within the term of such Order Form, after which any unused Credits will expire and cannot be redeemed, refunded, or credited.” Once prepaid credits are exhausted, Snyk may invoice On-Demand Consumption.[1] Catalog proof: Unused credits expire at the end of the Order term. The credit-based billing policy uses the same wording and adds that excess credits are priced at the customer’s per-credit price in the Order.[6]
Fees, downgrades and billing
- “All Subscription Fees are non-cancellable and non-refundable unless otherwise set out in this Agreement.”[1]
- “You may not downgrade your Subscription Allocation or move to a lower tier of any Service Plan during the term of this Agreement.”[1] Catalog proof: No downgrade during the term.
- If an Order Form does not state billing terms, “the default billing frequency (excepting On-Demand Consumption) is annual and the payment term is net 30 from the date of the invoice”.[1]
- Service Plans are billed to a payment card in advance, monthly or annually. Snyk may change Service Plan prices; a customer that does not accept a change must delete its account, and is charged at the old price only up to termination.[1]
- Fees are payable in US dollars, exclusive of taxes.[1]
Virtualization & partitioning
Not applicable. The Terms licence a hosted service. Section 3.7 lets Snyk “rate-limit, throttle or otherwise restrict usage of the Tools” (the API, CLI, IDE and SCM components) where it considers use abusive or excessive.[1]
Cloud / BYOL
There is no bring-your-own-licence right. Purchases through a Channel Partner are paid under the partner’s terms, and sections 6.3 to 6.6 of the Terms then do not apply to payment. The rest of the Terms still governs use.[1] Catalog proof: Channel partner purchases follow the partner payment terms. If the Channel Partner does not pay Snyk, Snyk may terminate, and “your sole recourse with respect to any such termination shall be against the Channel Partner”.[1]
Programs
Renewal and pricing at renewal
Unless the Order Form or Service Plan says otherwise, the Initial Term is one year. It “shall renew automatically for successive 1 year periods” unless either party gives written notice of non-renewal at least 30 days before the end of the term.[1] At renewal, “Snyk’s then current rates for the Services, including, where applicable, the rates set forth in Snyk’s then-current rate card applicable to Credits, will apply”.[1] Catalog proof: Renewals are priced at then-current rates and rate card. See Automatic renewal.
Termination and its effects
Either party may terminate for an uncured material breach after 30 days’ notice, or for insolvency. Snyk may also terminate for non-payment that remains unpaid 10 days after written notice.[1] On termination or expiry, the use right ends. The customer must delete its organization and projects, and “shall immediately uninstall all Tools from all computer equipment in your possession or control” and provide evidence on request.[1] Catalog proof: Tools must be uninstalled on termination. The customer may keep using Service Data and Snyk material contained in Outputs that it received before termination.[1]
Amendment
Snyk “may periodically update the terms of this Agreement”. Updates take effect “30 calendar days after it is posted” unless the notice says otherwise.[1] A paid customer that reasonably objects can discuss the change. If no resolution is reached within 30 days, Snyk either does not apply the update to that customer or lets it terminate, with a refund of prepaid fees for Services not yet delivered. Free users who disagree must delete their organization and stop using the Services.[1] Catalog proof: Terms updates bind 30 days after posting.
Open source and evaluation use
The Secure Developer Program gives qualifying maintainers enterprise entitlements, but “These entitlements will only be valid for your open source projects and cannot be used for corporate or non-open-source projects.”[4] Catalog proof: Secure Developer Program licences cover open source projects only. Under the Terms, free, evaluation and Open Source Projects use carries no Performance Warranty, and Snyk “may suspend, limit or throttle such Services at any time where necessary due to the exigencies of its business”.[1]
Snyk API & Web Addendum
Snyk API & Web, the dynamic application and API testing product, is governed by an addendum to the Terms. For Snyk API & Web, the addendum takes precedence over the Terms, which take precedence over an Order Form.[3] It contains a usage limit: “If you are a self-serve customer, you are not entitled to concurrent scans of the same target or more than 60 scans of the same target on a monthly basis.”[3] The Terms repeat this limit for Offensive Security Tooling.[1] Catalog proof: Self-serve Snyk API & Web is limited to 60 scans per target per month. The addendum commits to 99.9% availability for paid access, measured over a 90-day period. The remedy is service credits of 2, 5 or 10 days.[3]
Other terms
- Contracting entity and law. “Snyk” means Snyk Inc for customers located in the United States, and Snyk Limited for customers elsewhere.[1] Contracts with Snyk Inc are governed by Delaware law, with courts in Dover, Delaware; contracts with Snyk Limited go to the courts of England and Wales.[1] Catalog proof: Contracting entity depends on customer location.
- Assignment. Neither party may assign without consent, except to an Affiliate or a successor in a merger or acquisition, with notice.[1]
- Liability. Aggregate liability is capped at the greater of USD 100 or the subscription fees paid or payable for the 12 months before the claim. Indemnities, fraud and some other heads of liability are excluded from the cap.[1]
- IP indemnity. Snyk defends and indemnifies the customer against third-party claims “that the Services infringe such third party’s Intellectual Property Rights”, subject to exclusions.[1]
- Confidentiality. Snyk’s Confidential Information includes “product roadmaps, pricing”, and “The terms of this Agreement are confidential to both parties.”[1]
- Ownership and AI. The customer owns its Customer Data, Code Assets and Outputs. Snyk will not use Inputs to train AI Models in the Services, except where that training is provided for the customer and not shared.[1]
Out of scope
This article does not cover the signed Snyk Software as a Service Agreement, which is published as a PDF outside snyk.io. It also does not cover the Data Processing Addendum, the Security Addendum, the Government Addendum, the EU Data Act Addendum or the Channel Partner Customer Terms, beyond noting that they exist.