DevOps & CI/CDMicrosoft (GitHub)

GitHub Review 2026

4.6/ 5.0 from 18,420 verified reviews
Vendor
Microsoft (GitHub, Inc.)
Pricing
Free; Team $4; Enterprise $21/user/mo
Deployment
Cloud (SaaS), Self-hosted (Server)
Best For
All sizes; engineering teams of 5–50,000+
Industries
Software, Financial Services, Public Sector, Healthcare
Implementation
Days to weeks (SaaS); 1–3 months (Server)

Overview

GitHub is the world's largest source code hosting and software collaboration platform, with more than 100 million developers and 420 million repositories on the public service. Acquired by Microsoft for $7.5 billion in 2018, GitHub has expanded well beyond Git repository hosting into a full DevSecOps suite that includes Actions (CI/CD), Packages (registries), Codespaces (cloud dev environments), Advanced Security (SAST, secret scanning, supply chain), Projects (issue management), and Copilot (AI pair programming).

For enterprise buyers, GitHub competes directly with GitLab, Bitbucket, and Azure DevOps. Its strongest differentiator is ecosystem reach — almost every modern developer tool integrates with GitHub natively, and most open-source dependencies are hosted there. The 2024–2025 introduction of GitHub Models, expanded Copilot autonomy, and the rebranded Enterprise Cloud bundle have shifted the platform decisively toward AI-assisted development as the default. Pricing has crept up correspondingly, and Advanced Security in particular is a meaningful budget line for security-conscious enterprises.

Key Features

  • Git repository hosting with branch protection, code owners, and required reviews
  • GitHub Actions for CI/CD with hosted runners (Linux, Windows, macOS, ARM)
  • GitHub Copilot AI code completion, chat, and agent mode
  • Advanced Security: CodeQL SAST, secret scanning with push protection, Dependabot
  • GitHub Packages registries for npm, Maven, NuGet, RubyGems, Docker, Container
  • Codespaces cloud development environments based on devcontainers
  • GitHub Projects for issue tracking, roadmaps, and Kanban boards
  • SAML SSO, SCIM provisioning, audit log streaming to SIEM
  • Enterprise Managed Users (EMU) for centrally controlled identities
  • Self-hosted runners and GitHub Enterprise Server appliance for air-gapped use
  • FedRAMP Moderate authorisation via GitHub Enterprise Cloud — Government
  • Native integrations with Microsoft Entra ID, Azure, Teams, and Visual Studio

Pricing

PlanModelCost
FreePer user$0 (unlimited public/private repos, 2,000 Actions minutes/mo)
TeamPer user/month$4/user (3,000 Actions minutes, Codespaces metered)
Enterprise CloudPer user/month$21/user (50,000 Actions minutes, SAML SSO, audit log)
Copilot BusinessPer user/month$19/user add-on
Copilot EnterprisePer user/month$39/user add-on (includes Copilot Business)
Advanced SecurityPer active committer$49/committer/month add-on

Pricing verified May 2026 against GitHub's public pricing pages. Enterprise contracts (1,000+ seats) typically negotiate 15–30% discount and volume pricing for Actions minutes and Copilot.

Strengths

  • Largest developer community and the de facto identity provider for open source
  • Actions has the widest marketplace of pre-built workflows and reusable templates
  • Copilot remains the most mature AI coding assistant, with broad IDE coverage
  • Enterprise Managed Users solves identity sprawl across personal and work accounts
  • Strong compliance posture: SOC 2 Type 2, ISO 27001, FedRAMP Moderate, HIPAA
  • Codespaces makes onboarding new engineers reliably fast on supported repos

Limitations

  • Advanced Security is priced per active committer and adds substantial cost at scale
  • Actions hosted runners have throttling and concurrency limits that surprise large teams
  • GitHub Enterprise Server lags Cloud by 6–9 months on most new features
  • Audit log and webhook reliability has had repeated outages reported on the status page
  • Project management features remain thinner than Jira for non-trivial portfolio work

Alternatives

Single-application DevSecOps; stronger self-hosted story
4.5
Tighter integration with Jira and Confluence
4.1
Microsoft-stack shops; Boards is stronger than Projects
4.3
Open source CI alternative for complex pipelines
3.9
Hosted CI with faster builds on Docker-first workloads
4.2

Compare GitHub

GitHub vs GitLab → GitHub vs Bitbucket → GitHub vs Azure DevOps →

Frequently Asked Questions

Is GitHub Enterprise Cloud or Server better for regulated industries?
Enterprise Cloud now holds FedRAMP Moderate authorisation and meets most banking and healthcare requirements through the standard tenant. Enterprise Server (the self-hosted appliance) remains relevant only for true air-gapped environments and data residency in jurisdictions GitHub does not yet host in. Most regulated enterprises moved to Cloud over the past 24 months.
How much does GitHub Copilot actually save?
Independent measurement is limited. GitHub's own published studies cite 30–55% time reduction on isolated tasks, but enterprise pilots typically report 10–20% throughput improvement on routine work and minimal gain on complex design work. The economics generally pencil at Copilot Business ($19/user) for engineering organisations of 50+ developers.
Can we run GitHub Actions on our own infrastructure?
Yes. Self-hosted runners are free and supported on all paid plans. Many regulated organisations use self-hosted runners on dedicated VPCs or on-premise hardware for jobs that need access to internal networks, GPU pools, or licensed software. Actions Runner Controller (ARC) provides Kubernetes-native autoscaling for self-hosted runners.
What is the real cost of GitHub Advanced Security at scale?
Advanced Security is billed at $49 per unique active committer per month. For a 500-engineer organisation where 300 committed in the billing month, that is $14,700/month or roughly $176,000/year on top of the base Enterprise Cloud subscription. Buyers should benchmark against Snyk, Veracode, and Checkmarx before committing.
Last updated: May 2026
Last updated: