GitHub bundles Copilot and Agent governance into Enterprise, adds three security add-on cards

WHY IT MATTERS

For GitHub, bundling Copilot and Agent governance into Enterprise narrows the gap between "pay for AI as an add-on" and "AI is included at this tier" — a packaging move companies increasingly reach for instead of a straight price increase. For the category, it's another sign that feature bundling, not sticker price, is where competitive pressure on AI capability shows up first. Watch whether GitHub's three newly separated security add-ons pick up their own pricing moves next, the way Secret Protection's AI detection feature did on Oct 17.

BY THE NUMBERS

• Second feature addition in 12 days, after Oct 17's Secret Protection AI update
• GitHub's 3rd feature-addition change since tracking began Apr 2024
• Typical gap between GitHub changes: ~94 days; this one landed in 12
• 23% of 2,344 tracked pricing changes (180 days) were feature additions

THEIR RATIONALE

GitHub is framing Enterprise around AI and governance rather than security and compliance alone — the tagline swap puts Copilot and agent oversight ahead of the old pitch. This is GitHub's second feature addition in 12 days, following the Oct 17 release of usage-based AI detection for push protection in Secret Protection, and it comes well inside the company's typical ~94-day gap between pricing changes — a cluster of AI-adjacent moves rather than an isolated repositioning.

THE SIGNAL

Splitting GitHub Code Quality, GitHub Code Security and GitHub Secret Protection into three separately linked cards, each with its own pricing page, suggests GitHub wants these treated — and likely priced — as distinct add-on lines rather than one bundled security block, continuing the unbundling direction it took when it pulled Advanced Security out of Enterprise in 2025. Folding Copilot and Agent governance straight into Enterprise, instead of leaving them as add-ons, fits the market's most common move right now: feature additions made up 23% of the 2,344 pricing changes tracked across the index in the last 180 days, with Together, Microsoft and Vercel shipping them most often. GitHub is using that move to reposition its top plan around AI rather than raise its price.

IN CONTEXT

This is GitHub's second feature addition in 12 days, coming just after Secret Protection gained AI-powered push-protection detection — far faster than its usual ~94-day gap between pricing changes. It's also the company's third tracked feature-addition move, following the data residency feature it added when it restructured Enterprise pricing in January 2025. Bundling Copilot and Agent governance into Enterprise while splitting security into three standalone add-on cards echoes a market-wide pattern: feature additions made up 23% of the 2,344 pricing changes tracked across the index in the last 180 days, with Together, Microsoft and Vercel shipping them most often. Where GitHub differs is intent — it's using the addition to reposition Enterprise around AI, not just add a line item.