shouldiuse.io

Categories

VERDICT

GitHub Review

Worth it

Should I use GitHub?

Join the world's most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity. - github.com

· 1 month ago

Buy if your team writes code — it is the industry default with a genuinely free tier. Skip it only if you need self-hosting or predictable flat-rate AI pricing.

Confidence

High. Based on 60+ public sources: G2 reviews, Reddit threads, security post-mortems, and pricing guides.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support-quality evidence in sources
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
ProNot confirmed in sources
TeamNot confirmed in sources
EnterpriseSee Azure Marketplace listing

Best for

  • Software teams of any size
  • Open source projects
  • Code review and CI/CD workflows
  • Enterprises adopting AI-assisted development

Not for

  • Non-technical teams that never touch code
  • Orgs requiring self-hosted, on-prem code hosting
  • Buyers who need predictable flat-rate AI pricing
  • Privacy-sensitive teams avoiding US cloud lock-in

Gotchas - check before you buy

high

Copilot AI credits are usage-based; users report surprise bills and lock-in. Model costs before enabling org-wide.

high

2026 breach originated via a malicious VS Code extension; police extension installs across your org.

medium

Self-hosted Actions runners become paid from March 2026 after an earlier backlash and delay.

low

Guess: migrating off GitHub (repos, issues, Actions) is painful; document an exit path early.

Pros and cons

Pros

  • Free plan covers individuals and small teams
  • Used by 800,000+ companies; the developer default
  • Mature pull-request and code review workflow
  • Copilot AI coding agent built in
  • Rated 4+ across 3,099 G2 reviews

Cons

  • Beginners consistently report Git is confusing and unfriendly
  • Users criticize the UI design as messy
  • Copilot usage-based billing called unfair and expensive
  • Self-hosted runners become paid from March 2026
  • May 2026 breach via malicious VS Code extension

Sources & method

- 12 sources - Strong built-in security tooling, but a May 2026 breach via a malicious VS Code extension and earlier incidents are documented.

official x3review x4security x2news x3
  • May 2026 breach via malicious VS Code extension, Attackers used a malicious VS Code extension; multiple security firms published post-mortems.
  • Critical vulnerability exposed millions of repositories, GitHub disclosed a critical vulnerability that exposed millions of repositories.
  • Grafana token breach led to extortion attempt, A stolen GitHub token let attackers download Grafana codebases and attempt extortion.
  • 2022 phishing-driven incidents, Phishing-based token theft incidents are documented in a 2022 incident review.

Key stats

  • Value for money: 4/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Free core tier; AI add-ons pricey
  • Ease of use: 3/5. Beginners report a steep Git learning curve
  • Feature depth: 5/5. Hosting, code review, CI/CD, security, AI in one
  • Support quality. No support-quality evidence in sources
  • Security posture: 3/5. Strong tooling; real 2026 breach though
  • 4+/5 G2 rating 3,099 reviews across GitHub's products
  • Yes Free tier Free plan available
  • $0 Starting price Paid Pro, Team, Enterprise tiers above
  • $354M Funding Total raised (Tracxn)

Pricing

Free

$0

  • Confirmed free plan
  • For individuals and small projects

Pro

Not confirmed in sources

  • For individual developers

Team

Not confirmed in sources

  • Per-user team collaboration

Enterprise

See Azure Marketplace listing

  • Advanced security and compliance

Security

Strong built-in security tooling, but a May 2026 breach via a malicious VS Code extension and earlier incidents are documented.

  • May 2026 breach via malicious VS Code extensionAttackers used a malicious VS Code extension; multiple security firms published post-mortems.⁸
  • Critical vulnerability exposed millions of repositoriesGitHub disclosed a critical vulnerability that exposed millions of repositories.⁹
  • Grafana token breach led to extortion attemptA stolen GitHub token let attackers download Grafana codebases and attempt extortion.
  • 2022 phishing-driven incidentsPhishing-based token theft incidents are documented in a 2022 incident review.

Alternatives

Compare GitHub with each alternative.

  • GitLab

    All-in-one DevOps with a strong self-hosted option.

    GitHub vs GitLab
  • Bitbucket

    Better fit if you already live in Atlassian tools.

  • Self-hosted Git (Gitea, Forgejo)

    For teams avoiding US cloud dependency.

Companies that use it

  • 3M
  • Ahold Delhaize
Full analysis

Based on 60+ public sources: G2 reviews, Reddit threads, security post-mortems, and pricing guides.

The default code host — free for most teams; watch Copilot usage billing and the 2026 breach.

Methodology

Based on 60+ public sources: G2 reviews, Reddit threads, security post-mortems, and pricing guides.

Read how a report is made.

Sources

  1. review
  2. review
  3. review
  4. review
  5. official
  6. official
  7. official
  8. security
  9. security
  10. news
  11. news
  12. news

Add this review to your site

GitHub earned a Worth it check.

Put the badge on your site, pricing page, or docs.

Visitors see an independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.