OpenHack Supply Chain
openhack.com
Spec sheet
- Purpose
- OpenHack Supply Chain combines software composition analysis and supply chain intelligence to find vulnerable dependencies and identify malicious dependencies.Read 11 Oct 2026 · openhack.com
- Intended users
- The product page describes reports for security reviewers and enterprise buyers, while the pricing page presents plans for startups and enterprises.Read 11 Oct 2026 · openhack.com
- Compliance
- The Trust Center lists HIPAA and GDPR as compliant, while SOC 2 Type I and ISO 27001 are in progress.Read 11 Oct 2026 · openhack.com
- Support
- Enterprise pricing lists guided onboarding, dedicated customer success, a custom SLA, and priority phone and email support.Read 11 Oct 2026 · openhack.com
- AI data handling
- OpenHack says customer data is not used to train, fine-tune, or improve AI models, and that inference is stateless with no input-data retention.Read 11 Oct 2026 · openhack.com
- Audit reports
- Supply chain reports include an executive risk summary, prioritized remediation plan, dependency and license context, time-to-fix metrics, and remediation evidence.Read 11 Oct 2026 · openhack.com
- Dependency mapping
- It maps direct and transitive dependencies from manifests and lockfiles across connected repositories.Read 11 Oct 2026 · openhack.com
- Fixes
- For supported npm and PyPI dependency updates, it can prepare a fix pull request for the team to review and merge.Read 11 Oct 2026 · openhack.com
- GitHub integration
- The Free plan includes GitHub integration, and the Trust Center says customer source code is accessed read-only through authorized GitHub integrations.Read 11 Oct 2026 · openhack.com
- Malicious packages
- Its supply chain intelligence identifies and blocks malicious packages in npm and PyPI.Read 11 Oct 2026 · openhack.com
- SBOM
- It exports dependency inventories as CycloneDX 1.5 JSON, including package names, resolved versions, available license information, and dependency relationships.Read 11 Oct 2026 · openhack.com
- Security controls
- The Trust Center lists encryption at rest and in transit, encrypted database backups, multi-factor authentication, least-privilege access, and organization-scoped data access.Read 11 Oct 2026 · openhack.com
- Source-code handling
- OpenHack says code is downloaded temporarily for analysis and deleted after scan completion, and that it does not modify, fork, or retain repository copies.Read 11 Oct 2026 · openhack.com
- Version drift
- It compares installed package versions across repositories to surface version drift and components needing attention.Read 11 Oct 2026 · openhack.com
Plans and prices
Free (Pay as you go) Free 1 project · 5 free PR reviews per month · 1 free full scan (one-time) · Basic SCA · OpenHack CLI access Read 11 Oct 2026 · openhack.com
Enterprise Priced on request Custom pricing Unlimited connected repositories, projects, and read-only users · Custom rates · Full security platform · Custom deployment options and dedicated support Read 11 Oct 2026 · openhack.com
Where Specifiction places it
- Software Composition Analysis Software#41 of 657.6
Alternatives to OpenHack Supply ChainAll alternatives →
Endor Labs Free plan 8.9 Visit 
DepWarden From $19/mo · Free plan 8.7 Visit 
Eclipse Steady Free plan 8.6 Visit 
Mend SCA From $20.83/mo 8.6 Visit 
Scantist Free plan 8.6 Visit