Skip to content
SPECIFICTION
Get listed

SafeDep Platform

safedep.io

From $100/mo Free plan WebmacOSLinuxAPISelf-hosted
Visit safedep.io
Spec score 8.2 #9 of 24 in Software Supply Chain Security Software

What it is

SafeDep Platform helps teams identify and govern risks in open-source dependencies, from package installation through code review and inventory. Its package monitor checks installs against threat intelligence and policy before post-install scripts can run. The platform scans dependencies, analyzes their actual use, applies policy as code, and generates SBOMs. A GitHub App scans pull requests for malware, vulnerabilities, and license issues, and can act as a required check. Its MCP server checks packages requested by AI agents and attributes each request; named supported agents include Claude Code, Cursor, and Windsurf. Inventory can cover coding agents, MCP servers, CLI tools, skills, scope, and version. Supported ecosystems include npm, PyPI, Maven, Go, Ruby, Rust, and PHP, along with Docker and OCI images, CycloneDX and SPDX SBOMs, GitHub repositories, and GitLab projects. The platform also provides centralized policies, organization-wide findings, audit trails, and compliance reports. The Free plan is free for up to three SDLC endpoints. Team costs $100 a month for five endpoints; Enterprise pricing is custom.

Spec sheet

Purpose
SafeDep blocks malicious open source components before they run and provides visibility and policy over dependencies.Read 2 Oct 2026 · docs.safedep.io
Trial
The 30-day trial requires no credit card and moves to the Free plan automatically when it ends.Read 2 Oct 2026 · safedep.io
Integrations
The platform identifies GitHub Actions, GitLab, Docker, Cursor, Claude, Windsurf, npm, PyPI, Go, Maven, RubyGems, Cargo, NuGet, OpenAI, and Gemini across its supported stack.Read 2 Oct 2026 · safedep.io
Support
The pricing comparison lists community support for Free, email support for Team, and dedicated support for Enterprise.Read 2 Oct 2026 · safedep.io
Headquarters
Dover, Delaware, USARead 28 Sep 2026 · safedep.io
AI agent security
The MCP server checks packages requested by AI agents and attributes requests to the agent; the page names Claude Code, Cursor, and Windsurf as supported agents.Read 2 Oct 2026 · safedep.io
CI/CD
The GitHub App scans pull requests for malware, vulnerabilities, and license issues and can run as a required check.Read 2 Oct 2026 · safedep.io
Ecosystems
SCA support lists npm, PyPI, Maven, Go, Ruby, Rust, and PHP, plus Docker and OCI images, CycloneDX and SPDX SBOMs, GitHub repositories, and GitLab projects.Read 2 Oct 2026 · safedep.io
Install protection
PMG checks package installs against threat intelligence and policy before post-install scripts can run.Read 2 Oct 2026 · safedep.io
Inventory
Endpoint inventory can include coding agents, MCP servers, CLI tools, skills, scope, and version.Read 2 Oct 2026 · safedep.io
Open source
Vet, PMG, xBom, and Gryph are described as free open-source tools usable without a SafeDep account; the company says the tools use Apache-2.0 and have no telemetry.Read 2 Oct 2026 · docs.safedep.io
Policy and reporting
The platform provides centralized policies, organization-wide findings and visibility, audit trails, and compliance reports.Read 2 Oct 2026 · safedep.io
SCA and SBOM
SafeDep scans dependencies, analyzes actual dependency usage, enforces policy as code, and generates SBOMs.Read 2 Oct 2026 · safedep.io
Security and compliance
The pricing page lists SOC 2 and ISO 27001 reports for Enterprise, and identifies ISO 27001 certification.Read 2 Oct 2026 · safedep.io
Usage limits
Protection, continuous PR and CI scanning, inventory, and findings are described as unlimited; included on-demand scans vary by plan and extra package scans cost $0.50 each.Read 2 Oct 2026 · safedep.io

Plans and prices

Free Free $0 forever Up to 3 SDLC endpoints · 7-day findings history · community support · no card, no expiry Read 2 Oct 2026 · safedep.io
Team $100 a month $100 per month, billed monthly; 5 endpoints × $20 / month Shown price is for 5 endpoints · 90-day findings history · 50 on-demand package scans / month · 125 on-demand repository scans / month · email support Read 2 Oct 2026 · safedep.io
Enterprise Priced on request Custom volume endpoint pricing Custom endpoint pricing · SSO · RBAC · MDM rollout and registry enforcement · custom data retention · SIEM and EDR integrations · dedicated support Read 2 Oct 2026 · safedep.io

Every SafeDep Platform plan and price →

Strong points and limits

Strong points

  • Checks package installs before post-install scripts run
  • Scans pull requests for malware, vulnerabilities, and licenses
  • Supports multiple package ecosystems and SBOM formats
  • Free plan includes up to three SDLC endpoints

Limits

  • Free plan retains findings for seven days
  • Team includes 50 on-demand package scans monthly
  • Extra package scans cost $0.50 each
  • Enterprise pricing is custom

Who it suits

It suits software teams that need dependency scanning, policy controls, and SBOMs across development workflows. Teams using AI coding agents can also use its agent-aware package checks and inventory.

Verdict

SafeDep covers dependency checks across installation, pull requests, and inventory, with policy and reporting tools. The Free plan has endpoint and history limits; Team adds longer history and specified scan allowances.

Where Specifiction places it

Alternatives to SafeDep PlatformAll alternatives →