Source: https://codereviewguide.fyi/perch-vs-snyk-code/

Perch vs Snyk Code · reviewed 2026-10-14

# Snyk Code comparison for project-specific behavior checks

Use Perch for an English requirement about how application code should behave, checked on the current method. Keep security testing as a separate gate rather than treating one semantic requirement as a complete security assessment.

`perch check` reads working files; `perch scan` reads Git HEAD. Relevant source is sent to TypeSafe’s hosted models. The MIT CLI does not run model inference offline.

[See the rule catch a regression](https://codereviewguide.fyi/perch-vs-snyk-code/#check)[Install the Perch CLI](https://github.com/lakeday-org/perch/blob/main/docs/install.md)

## Perch

~50¢

per mid-sized pull request · estimate

- 10¢ per 1,000 fresh rule checks
- Cached checks free
- No seat fees · $5 free usage credit
- MIT CLI · English project rules

**Snyk Code**Team starts at $25/month for teams up to 10 developers; 1,000 Code tests and 100 projects.

Perch estimate: approximately 150 methods read, based on September–October 2026 check density. [Compare billing assumptions](https://codereviewguide.fyi/perch-vs-snyk-code/#pricing).

**Run it locally**Check uncommitted files

**Keep the rule**Version it with the code

**Read each method**Within the selected parsed scope

**Pay for checks**No per-developer subscription

## Catch the fix an agent removes later.

A saved requirement makes a recurring mistake checkable. In this Perch capture from September 20, 2026, the same rule flags a missing guard and passes after the guard is restored.

### The regression

```
def refund(order, payment):
    payment.refund(order.total)
    order.status = "refunded"
    return order
```

1 check, 1 broken. Refunded orders cannot be refunded again.

### The guarded method

```
def refund(order, payment):
    if order.status == "refunded":
        return order
    payment.refund(order.total)
    order.status = "refunded"
    return order
```

1 check, nothing to report.

Source: [public order-service checkout.py at the linked commit](https://github.com/lakeday-org/perch/blob/4af67af46d76ac99398d61c7ad0a45441760d4dc/test/fixtures/order-service/checkout.py). The captured standalone file is refund.py. [Perch command output and timestamp](https://codereviewguide.fyi/perch-vs-snyk-code/refund-capture.json). This saved-rule demonstration does not measure Snyk Code's detection rate.

## Perch vs Snyk Code: what your team runs.

Perch turns project behavior into focused checks that agents can run before committing. Use these differences to choose the review workflow and billing model your team needs.

Published Perch capabilities and Snyk Code documentation, reviewed 2026-10-14

| Capability | Perch | Snyk Code |
| --- | --- | --- |
| Billing | 10¢ per 1,000 fresh rule checks. Cached checks free. No seat fees. | Team starts at $25/month for teams up to 10 developers; 1,000 Code tests and 100 projects.[Vendor documentation ↗](https://snyk.io/plans/) |
| Before commit | perch check reads the files on disk, including uncommitted edits. | Apache-2.0 CLI provides local and CI security testing.[Vendor documentation ↗](https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/scan-source-code-with-snyk-code-using-the-cli) |
| Custom requirements | English ensure rules in perch.yaml: project, file or method scope. No paid custom-rule tier. | Policies and .snyk ignore configuration.[Vendor documentation ↗](https://snyk.io/plans/) |
| Coverage | Each parsed non-test application method in the selected scan scope is read, with caller and callee context. No method-count cap. | SAST with interfile analysis in most supported languages.[Vendor documentation ↗](https://snyk.io/product/snyk-code/) |
| Open source | MIT-licensed CLI. Hosted model analysis is a paid service. | Apache-2.0 CLI; proprietary Code engine.[Vendor documentation ↗](https://github.com/snyk/cli/blob/main/LICENSE) |

## Snyk Code comparison for project-specific behavior checks

Keep security testing for its security coverage. Choose Perch for English behavior requirements such as preserving an ownership guard or using one transaction client. The MIT CLI checks the agent's uncommitted fix and retains the same requirement for CI.

## Review before committing

Snyk Code: Apache-2.0 CLI provides local and CI security testing. [Snyk Code workflow documentation](https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/scan-source-code-with-snyk-code-using-the-cli).

Perch reads the current working file with `perch check`. For a known requirement, select its rule name and method instead of requesting another broad review. A local CLI describes where the command runs; Perch sends relevant source to hosted TypeSafe models for analysis.

## How do saved requirements differ?

Snyk Code: Policies and .snyk ignore configuration. [Snyk Code rule documentation](https://snyk.io/plans/).

Perch stores English `ensure` rules in `perch.yaml` or `.perch/rules/`. Project, file and method scopes determine what is checked. Run the named check after an edit and after the repair; a rule finding can fail the command and a CI gate. [Perch rules](https://github.com/lakeday-org/perch/blob/main/docs/rules.md) · [Working-file checks](https://github.com/lakeday-org/perch/blob/main/docs/check.md).

## What does the review bill depend on?

[Compare Snyk Code's billing unit and Perch's usage estimate](https://reviewpricing.fyi/snyk-code/)

## Is the CLI open source and offline?

Snyk Code: Apache-2.0 CLI; proprietary Code engine. [Snyk Code product or license source](https://github.com/snyk/cli/blob/main/LICENSE).

Perch’s CLI is MIT-licensed; hosted model inference is a separate paid service included in its published check rate. It does not run the model offline. Unchanged requests can reuse cached answers for free. Fresh judgments can vary, and a passing requirement check does not prove application correctness. [Perch MIT license](https://github.com/lakeday-org/perch/blob/main/LICENSE).

## When does Snyk Code fit the workflow?

Snyk Code provides security-focused SAST with an open CLI and interfile analysis. Its free test allowance or team pricing can fit security work that is different from Perch’s saved behavior checks.

## Estimate the review bill

[Perch and Snyk Code: pricing, allowances and workload calculator](https://reviewpricing.fyi/snyk-code/)

## Make the agent check its next edit.

### Install the CLI

```
npm install -g @lakeday/perch
```

[Perch installation and quick start](https://github.com/lakeday-org/perch/blob/main/docs/install.md)

### Save a behavior rule

```
perch rules add refund-once \
  --where refund.py --each method \
  --ensure "Refunded orders cannot be refunded again."
```

The captured rule checks the requirement shown above. [Rule syntax and selectors](https://github.com/lakeday-org/perch/blob/main/docs/rules.md)

### Check the working file

```
perch check refund.py::refund --rules refund-once
```

Run the check after an edit and after the fix. [Working-tree check documentation](https://github.com/lakeday-org/perch/blob/main/docs/check.md)

Use [perch scan](https://github.com/lakeday-org/perch/blob/main/docs/scan.md) for repository code at Git HEAD and [changed-code CI checks](https://github.com/lakeday-org/perch/blob/main/docs/ci.md) for pull requests. New model judgments can vary. Repeatability comes from cached answers for unchanged requests; a pass does not prove application correctness.

## Keep your project requirements checkable.

Choose Perch when you want an MIT CLI, English behavior rules and usage pricing that stays independent of team size. Give your coding agent a saved check it can run after every relevant edit.

[Install Perch](https://github.com/lakeday-org/perch/blob/main/docs/install.md)

## Sources and price details

Published by Perch. Vendor facts were reviewed on 2026-10-14; plans and allowances can change. Vendor marks belong to their owners.

- [snyk.io/plans/](https://snyk.io/plans/)
- [snyk.io/product/snyk-code/](https://snyk.io/product/snyk-code/)
- [docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/scan-source-code-with-snyk-code-using-the-cli](https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/snyk-cli-for-snyk-code/scan-source-code-with-snyk-code-using-the-cli)
- [github.com/snyk/cli/blob/main/LICENSE](https://github.com/snyk/cli/blob/main/LICENSE)
- [docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/ignore-vulnerabilities-using-the-snyk-cli](https://docs.snyk.io/developer-tools/snyk-cli/scan-and-maintain-projects-using-the-cli/ignore-vulnerabilities-using-the-snyk-cli)
- [docs.snyk.io/supported-languages/supported-languages-package-managers-and-frameworks](https://docs.snyk.io/supported-languages/supported-languages-package-managers-and-frameworks)
- [docs.snyk.io/supported-languages/technical-specifications-and-guidance](https://docs.snyk.io/supported-languages/technical-specifications-and-guidance)

Perch sources and example arithmetic

- [Public CLI source](https://github.com/lakeday-org/perch) · [MIT license](https://github.com/lakeday-org/perch/blob/main/LICENSE)
- [English rules](https://github.com/lakeday-org/perch/blob/main/docs/rules.md) · [Working-tree checks](https://github.com/lakeday-org/perch/blob/main/docs/check.md) · [Method scope and context](https://github.com/lakeday-org/perch/blob/main/docs/scanning.md)
- [Published Perch rate and estimate assumptions](https://codereviewguide.fyi/perch-vs-snyk-code/pricing-evidence.json)
- [September 20, 2026 refund-rule capture](https://codereviewguide.fyi/perch-vs-snyk-code/refund-capture.json)

## Compare Snyk Code with other review tools

- [CodeRabbit vs Snyk Code](https://codereviewguide.fyi/coderabbit-vs-snyk-code/)

[Full head-to-head library and tool selector](https://codereviewguide.fyi/tool-comparisons/)

**Code Review Guide**

Tools & workflows.

Published by Perch · © 2026 Verglas LLC. Code Review Guide is a Perch publication.

Perch’s MIT license covers the CLI; hosted model analysis is a paid service. Relevant source is sent to the configured model service.

[Perch CLI MIT license](https://github.com/lakeday-org/perch/blob/main/LICENSE) · [Article text](https://codereviewguide.fyi/perch-vs-snyk-code/index.md) · [Resource index](https://codereviewguide.fyi/llms.txt)
