shouldiuse.io

Categories

VERDICT

Snipe-IT Review

Depends

Should I use Snipe-IT?

Snipe-IT is a free, open source IT asset management system written in PHP - snipeitapp.com

· 2 weeks ago

Buy if you're an IT team tracking real device inventory and someone can host and patch it. Skip if you have a handful of laptops and no one technical — a spreadsheet wins.

Confidence

Medium. Based on ~14 public sources; no third-party star ratings or review counts found.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Self-hosted (open source)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Hosted / support plansNot published in sources

Best for

  • IT teams tracking laptops, licenses, accessories
  • Self-hosters wanting on-prem control
  • Orgs outgrowing asset spreadsheets
  • Hybrid Azure AD shops comfortable scripting

Not for

  • Tiny teams with a few devices — spreadsheet wins
  • Non-technical buyers with nobody to host and patch PHP
  • Teams wanting turnkey managed SaaS without paying
  • Buyers needing vendor SLAs and hand-holding

Gotchas - check before you buy

high

Known authorization-bug CVE means lagging patches on your instance is a real risk

medium

'Free' means self-hosted; hosted and support plans are paid, with prices not published

low

No SLA or support-quality details found in public sources; budget support plans separately

Pros and cons

Pros

  • Completely free forever if you self-host
  • Open source: transparent, no vendor lock-in
  • Tracks assets, software licenses, and accessories in one system
  • Sysadmins repeatedly recommend it for on-prem tracking
  • Easy to automate via scripts and integrations

Cons

  • You host it: PHP stack, upgrades, and backups are your job
  • Two public CVEs found; patching discipline is on you
  • Vendor hosting and support cost extra
  • Hybrid Azure AD sync needs custom scripting, per user reports

Sources & method

- 10 sources - Open source with a security page; two CVEs found in sources, including an authorization flaw.

official x4review x4security x2
  • CVE-2025-63743, Medium-severity vulnerability reported in Snipe-IT; details limited in sources reviewed.
  • CVE-2026-38533, Authorization-related vulnerability in Snipe-IT (Grokability, Inc.) listed in JVN database; PoC publicly referenced.

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free forever if self-hosted
  • Ease of use: 4/5. Users report easy wins over failing spreadsheets
  • Feature depth: 4/5. Assets, licenses, accessories, checkout covered
  • Support quality: 3/5. Paid plans exist; community is active
  • Security posture: 3/5. Transparent open source, but CVEs found
  • $0 Self-hosted price Free forever, open source
  • Yes Free tier Full product if self-hosted
  • Self-host or paid hosted plans Deployment Hosted/support pricing not published
  • 2 CVEs in sources 1 medium, 1 authorization flaw

Pricing

Self-hosted (open source)

$0

  • Full asset, license, accessory management
  • You run hosting, updates, backups

Hosted / support plans

Not published in sources

  • Vendor-hosted option
  • Paid support from Grokability

Security

Open source with a security page; two CVEs found in sources, including an authorization flaw.

  • CVE-2025-63743Medium-severity vulnerability reported in Snipe-IT; details limited in sources reviewed.⁵
  • CVE-2026-38533Authorization-related vulnerability in Snipe-IT (Grokability, Inc.) listed in JVN database; PoC publicly referenced.⁶

What users say

Reddit sysadmins and self-hosters consistently recommend Snipe-IT as the go-to free on-prem asset tracker.

“FREE SOFTWARE THAT WORKS GREAT! Been in IT professional for over 10+ years and Snipe-IT is the best Asset Tracking software I ever used and managed.”
Snipe-IT homepage testimonial
“100% for self hosted on prem Snipe-IT.”
Reddit, r/sysadmin
“SnipeIT was made for this. Easy to interface with python scripts in the future too.”
Reddit, r/selfhosted

Alternatives

Compare Snipe-IT with each alternative.

  • ManageEngine AssetExplorer

    Commercial ITAM with vendor support and SLAs.

Full analysis

Based on ~14 public sources; no third-party star ratings or review counts found.

Free, well-loved open-source asset tracker — but self-hosting makes your team its IT department too.

Methodology

Based on ~14 public sources; no third-party star ratings or review counts found.

Read how a report is made.

Sources

  1. Snipe-IT homepagesnipeitapp.com
    official
  2. Snipe-IT pricing / Free Foreversnipeitapp.com
    official
  3. Snipe-IT product security pagesnipeitapp.com
    official
  4. grokability/snipe-it on GitHubgithub.com
    official
  5. CVE-2025-63743 — Medium Vulnerability in Snipe-ITappsecure.security
    security
  6. JVNDB-2026-014243 — Snipe-IT authorization vulnerabilitysecualive.jp
    security
  7. Reddit r/sysadmin — self-hosted on-prem Snipe-ITreddit.com
    review
  8. Reddit r/selfhosted — department asset trackerreddit.com
    review
  9. Reddit r/sysadmin — Azure AD/O365 hybrid syncreddit.com
    review
  10. Spiceworks community — better than a manual spreadsheetcommunity.spiceworks.com
    review

Add this review to your site

This check for Snipe-IT says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Snipe-IT Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.