The seat rate is the small number. Advanced Security committers, Copilot tiers, and true up terms carry the real spend, and all of them negotiate.
GitHub Enterprise pricing looks like a flat per user rate, but the real spend sits in Advanced Security, Copilot, and the true up terms most buyers never negotiate.
GitHub Enterprise prices per user per month on the published rate card, with Advanced Security and Copilot sold as separate add ons that scale on different metrics. The list rates sit on the GitHub pricing page, but enterprise terms are negotiated.
The negotiation mistake is treating the seat rate as the deal. In our engagements the add ons carried 50 to 70 percent of total GitHub spend at enterprise scale.
Advanced Security bills on unique active committers, and that population is always larger than the security team's estimate because it includes service accounts, contractors, and occasional committers. GitHub documents the metric in its Advanced Security documentation.
Scope Advanced Security to the repositories that need it, exclude automation identities, and measure the real committer count for ninety days before any quote is accepted. The measured number is routinely 20 to 30 percent below the assumed number.
Routing GitHub through Microsoft contracting is worth evaluating at every renewal, because it opens enterprise agreement style discounting, co terming, and a second negotiation channel when the GitHub account team stalls. Microsoft has owned GitHub since 2018, and enterprise paper can reflect that.
Standalone GitHub vs Microsoft channel, buyer view
| Dimension | Standalone GitHub | Via Microsoft |
|---|---|---|
| Contract paper | GitHub terms | Microsoft enterprise terms |
| Discount levers | GitHub sales discretion | EA scale and bundle leverage |
| Co terming | Independent renewal date | Aligns with the EA cycle |
| Escalation path | GitHub account team | Microsoft account leadership |
| Best for | Pure GitHub estates | Estates with large Microsoft spend |
The channel decision is leverage in itself. Pricing both paths and letting each side know the other is being priced moved quotes in most of our engagements.
Five levers move GitHub Enterprise pricing: measured usage cleanup, committer scoping, mixed license tiers, term length, and the Microsoft channel. They compound, and the sequence matters because the cleanup resets the baseline every other lever prices against.
Run the cleanup first. A discount negotiated on an inflated seat base is a discount on waste.
The standard advice is to negotiate the seat price hard and accept the add ons at list because they are small line items. We disagree. In roughly 12 of the 15 plus GitHub estates Fredrik Filipsson benchmarked in 2024 to 2025, Advanced Security and Copilot together exceeded the core seat spend, and the committer metric grew faster than headcount. The buyer side move is to negotiate the add on metrics, committer scoping, true up treatment, and Copilot tier mix, before touching the seat rate. The seat price is the number GitHub expects you to fight about; the metrics are where the money moves.
Three cuts of our advisory engagement file frame the size of the opportunity.
Source: Redress Compliance advisory engagement file, 2024 to 2025.
Treat the ranges as negotiation benchmarks, not promises. Your estate sets the baseline; the engagement file tells you what disciplined buyers achieved against the same vendor playbook.
GitHub expects the fight on the seat price. The money moves on the metrics.
The moves below turn this analysis into a lower invoice at the next renewal.
GitHub Enterprise lists at a published per user per month rate, with Advanced Security and Copilot priced separately on their own metrics. At enterprise scale the add ons routinely carry half or more of the total spend, so the effective cost per developer is far above the seat rate.
No. Advanced Security bills per unique active committer, a population that includes service accounts and occasional contributors unless scoped. Measured committer counts run 20 to 30 percent below assumed counts in our engagements once automation identities are excluded.
Yes. Microsoft owns GitHub and enterprise purchases can route through Microsoft contracting, which opens EA style discounting and co terming with the Microsoft agreement cycle. Pricing both channels in parallel is itself a negotiation lever.
Effective improvements of 10 to 25 percent against first quote are achievable when usage cleanup, committer scoping, and channel competition run together. The discount follows the measured baseline, not the ask.
Tier mixing and activation data drive Copilot savings: license the enterprise tier only where its features are used and hold unused seats out of the renewal. Activation reports showing idle licenses are the strongest evidence in the conversation.
Six to nine months before expiry, starting with the usage and committer measurement. The measurement window needs ninety days, and the channel comparison needs time to run as real competition rather than a closing week gesture.
The committer measurement method, the tier mix worksheet, and the channel comparison that moves GitHub quotes.
Used across more than five hundred enterprise engagements. Independent. Buyer side. Built for procurement leaders running the next renewal cycle.
A discount negotiated on an inflated seat base is a discount on waste.
500+ enterprise clients. 11 vendor practices. Industry recognized. One conversation can change what you pay for the next three years.
One buyer side briefing a week. Pricing moves, audit signals, and the levers that work. No vendor spin.