by GitHub / Microsoft · founded 2021 · updated Sep 2026
GitHub Copilot pioneered AI pair programming and now spans code completion, chat, autonomous coding agents and code review across VS Code, JetBrains, and github.com. Multi-model support and deep GitHub integration make it the safest enterprise default for developer AI.
Coding AssistantsSubscriptionMatureFrom $10 per month (Pro)
VS CodeJetBrains IDEsVisual StudioGitHub.comAzure DevOps
Strengths
＋Deepest integration with GitHub PRs, issues and Actions
＋Multi-model: choose between OpenAI, Anthropic and Google models
＋Mature enterprise controls: policy management, IP indemnity, audit logs
Limitations
－Agentic capabilities arrived later than newer rivals
－Best experience is inside the GitHub/Microsoft ecosystem
－Completion quality varies across less common languages
Evidence behind this score
Each score is built from the claims below. This is a snapshot, so check the current terms with the vendor before you commit to anything.
3 of 5 claims below are past their re-check window. Pricing, availability and security details move fast, so confirm those with the vendor.
Claim
Source
Checked
All Copilot plans moved to usage-based AI Credits billing on June 1, 2026· re-check
GitHub pricing announcements
Jun 2026
Share among professional developers fell from 67% to 51% as AI-native rivals grew
2026 developer surveys
Jun 2026
IP indemnification included for business tiers· re-check
GitHub Copilot terms
Apr 2025
Extra promotional AI Credits ($30/user Business, $70/user Enterprise) that cushioned the June usage-based switch expire Aug 31, 2026; allotments drop to plan-level amounts after that· re-check
IT Pro; GitHub Copilot pricing coverage
Aug 2026
Unpatched against Plugin4Shell, a zero-click RCE via plugin SHA-pinning bypass disclosed Sept 17, 2026 affecting four AI coding agents; Microsoft, notified in June, had not shipped a fix, published an advisory or given a timeline as of Sept 20 — GitHub says its branch-naming rules block the exploit on github.com, but Copilot also pulls from Bitbucket, GitLab and self-hosted marketplaces without that protection
Plugin4Shell: a zero-click RCE hits Claude Code, Codex, Copilot and Gemini CLI at once
Researchers disclosed Plugin4Shell on September 17, a flaw in how Claude Code, OpenAI Codex, GitHub Copilot and Gemini CLI verify plugin updates pinned to a specific Git commit hash. An attacker who controls the plugin's repository can create a branch named after that pinned SHA and set it as the default branch, so the agent pulls malicious code while the pin still looks honored. No click, no approval prompt, no reinstall. Plugins loaded this way inherit the developer's own permissions: local source, cloud credentials, SSH keys, sometimes production access. Anthropic fixed Claude Code in version 2.1.179 and OpenAI closed it in Codex 0.146.0, both before the public disclosure. Google called Gemini CLI deprecated and pointed users to Antigravity instead of patching it. Microsoft, notified back in June, still hadn't shipped a fix, published an advisory, or given a timeline as of September 20 — GitHub says its own branch-naming rules block the exploit on github.com, but Copilot also pulls from Bitbucket, GitLab and self-hosted marketplaces that carry no such protection.
OpenAI acquires Ona (ex-Gitpod) to power Codex; 5M+ weekly users
OpenAI bought German startup Ona — formerly Gitpod — to give Codex persistent cloud-based agents, as Codex passes 5M weekly users. The coding-assistant race keeps consolidating around cloud agents. Anyone on Copilot, Cursor or Claude Code should watch where Codex takes its enterprise push.
Kimi K2.7 Code becomes first open-weight model in Copilot's picker
GitHub added Moonshot's Kimi K2.7 Code to Copilot's model picker — the first open-weight model offered there. Copilot's model line-up now spans OpenAI, Anthropic, Google and open weights. That is a cheaper agentic-coding option inside a tool most teams already have.
Google launches a $100/month AI developer coding tier
Google positioned an AI developer subscription at $100/month for coders, undercutting premium coding-assistant plans. Engineering leaders comparing Copilot, Claude Code and Gemini should re-price seats against this.