Depot vs FosterStack
Depot
depot.devFosterStack
fosterstack.comSide by side
| Figure | Depot | FosterStack |
|---|---|---|
| Price from | $20/mo | $41.58/mo |
| Free plan | — | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | — |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 4 |
| Spec score · Build Cache Software | 8.0 (#7) | 7.9 (#10) |
| Compliance | Depot states that it is SOC 2 Type 2 compliant and maintains documented security controls and continuous monitoring processes. | FosterStack says it is not FedRAMP or CMMC compliant; its published evidence and validated crypto are intended to support a customer's compliance program. |
| Support | The Developer plan includes community support, while Business includes Slack Connect support. | Bugs and questions can be reported through GitHub issues; the listed paid tiers describe email and priority support but are not yet available. |
Plans
In their own words
Depot
Depot provides software delivery tools spanning source control, builds, CI runners, sandboxes, caches, and registries. Its container build service is a drop-in replacement for Docker builds, with persistent caching and native x86 and Arm support. Depot CI runs existing GitHub Actions workflows as a programmable, debuggable CI service, while Depot Registry is an OCI-compliant registry for builds, pull-through caching, and other artifacts. Integrations include GitHub Actions, CircleCI, GitLab CI, Google Cloud Build, Travis CI, Bitbucket Pipelines, Buildkite, Jenkins, and AWS CodeBuild. Cache integrations cover Bazel, Go, Gradle, Maven, Pants, sccache, Nx, and Turborepo. Each build and CI run is isolated in a dedicated virtual machine. Depot says communications use TLS and storage is encrypted at rest; it also identifies SOC 2 Type 2 compliance and time-bound, permission-based debugging access. Plans start at $20 a month, billed monthly, with a 7-day trial and no free plan. Developer includes community support; Business includes Slack Connect support.
FosterStack
FosterStack is a self-hosted remote build cache server intended as a replacement for Develocity Build Cache Node. It supports Gradle and the Apache Maven Build Cache Extension remote HTTP mode, although Maven acceptance coverage is in progress. Size-capped LRU eviction frees space for new entries. HTTP Basic Auth over TLS uses constant-time credential comparison, and credentials are not logged. Prometheus metrics and a read-only status page report hit rates and cache size against its cap. Deployment options are a Docker image or static binary; release binaries are available for Linux and macOS on amd64 and arm64. Windows is not built or planned. The MIT-licensed core has signed releases with SLSA provenance, and security patches are included in the free tier. The maker says the free core makes no outbound connections and collects no telemetry or usage data. FosterStack identifies the product as v0.1 and says nobody outside its own work is yet running it in a production build pipeline. The full self-hosted server is free. Team, Business, and Compliance plans are described but not yet available, with listed prices of $49.00 per month, $199.00 per month, and $499.00 per year, respectively.