Side by side
CodeQL for Visual Studio Code vs Endor Labs
Both stand on ide code security plugins. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan LinuxMacWindows
Visit CodeQL for Visual Studio Code 
Free plan APIExtensionLinux+4
Endor Labs brings source, dependency and agent-security capabilities into one platform, with several deployment options. The free tier is limited, and teams considering paid plans need to contact sales for pricing.
Visit Endor LabsThe facts
| CodeQL for Visual Studio Code | Endor Labs | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Not published |
| Runs on | Linux, Mac, Windows | API, Extension, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Not published | Free or on request |
| Plans published | None | 3 |
| Maker | Not published | Not published |
| Website | github.com | endorlabs.com |
| On ide code security plugins | #5 of 19 | #1 of 19 |
CodeQL for Visual Studio Code: what it does well
Endor Labs: what it does well
- Free Developer tier offers local scans.
- Can inventory agents, models, MCP servers and skills.
- Scanning supports cloud, CI/CD runners and on-premises deployment.
- Generates SBOM and VEX.
- Paid plans include policies.
What to know first
- Free tier has no UI or scan history.
- Free tier does not include policies.
- Paid plan prices require contacting sales.
- No free trial is listed.
Alternatives to CodeQL for Visual Studio Code Alternatives to Endor Labs The whole list