Freedom251 › Artifact repository software

DepAegis

Free plan Self-hostedWeb

What DepAegis is

DepAegis is a private package registry for software supply-chain security, available through the web or as self-hosted software. It supports npm, NuGet, Maven, PyPI, Docker/OCI, Go Modules and Helm packages. Security controls include real-time OSV.dev and NVD vulnerability scanning, secrets detection, license compliance checks and typosquatting analysis. Its dependency firewall provides eight built-in policy types and OPA Rego integration. Publishing can include SLSA provenance, Sigstore signing and software bills of materials, while VEX/VDR and EU Cyber Resilience Act reports provide compliance information, attestations, summaries and audit trails. GitHub Actions, GitLab CI and Jenkins integrations are listed, along with a command-line tool for publishing, scanning and SBOM generation. Docker, Helm and bare-metal installation are documented. Community is free forever but limited to three users, five feeds, 50 packages, 1 GB and npm/NuGet. Paid plans start at €39/mo.

Who it suits

It suits teams managing private package feeds and software supply-chain controls. Self-hosted, web, CI/CD and enterprise deployment options support different operating models.

What it does well

Seven package formats are listed
OSV.dev and NVD scanning
Dependency firewall with OPA Rego
GitHub Actions, GitLab CI and Jenkins
Free Community plan available

What to know first

Community plan limited to three users
Community storage limited to 1 GB
Community supports only npm and NuGet
Documentation is still being written

Limits

Community is free forever and allows up to three users, five feeds, 50 packages, and 1 GB of storage. It includes npm and NuGet registries and OSV.dev vulnerability scanning.

Plans

Plan	Billed and limits	Price
Community	Free forever · Up to 3 users · Up to 5 feeds · Up to 50 packages · 1 GB storage · npm & NuGet registries · OSV.dev vulnerability scanning · Community support	Free
Pro	€149/org/month · Up to 25 users · Up to 5,000 packages · 100 GB storage · AI-powered vulnerability scanning · SLSA provenance and Sigstore signing · SSO · Custom roles · Priority support	€149 a month
Starter	€39/org/month · Up to 10 users · Up to 500 packages · 25 GB storage · 7 registry formats · SBOM generation · Dependency firewall and policy engine · Email support	€39 a month
Business	€449/org/month · Up to 100 users · Up to 25,000 packages · 500 GB storage · SAML SSO · SCIM provisioning · CRA/DORA/NIS2 reports · 99.9% SLA · Cargo and RubyGems included	€449 a month
Enterprise	Custom · Unlimited users and packages · Unlimited storage and bandwidth · Air-gapped deployment · OIDC/SAML · FIDO2/WebAuthn · Custom SLA and dedicated support · On-premise or private cloud	On request

As depaegis.com lists them, read 10 Oct 2026. The maker's own page has the final word.

Getting started

Visit https://depaegis.com/.
Choose the Community plan or a paid plan.
For self-hosting, use the Docker, Helm, or bare-metal installation route.
Connect a supported CI/CD service or use the CLI to publish, scan, or generate SBOMs.

Verdict

DepAegis combines package hosting with scanning, policy enforcement, provenance and compliance reporting. The free tier is tightly limited, while paid plans expand users, storage, formats and support.

Questions

Is DepAegis free?

Yes. Its Community plan is free forever, with limits of three users, five feeds, 50 packages, and 1 GB of storage.

What do paid plans cost?

Starter is €39/org/month, Pro is €149/org/month, and Business is €449/org/month. Enterprise pricing is custom.

Which package formats does it support?

The listed formats are npm, NuGet, Maven, PyPI, Docker/OCI, Go Modules, and Helm. Community is limited to npm and NuGet.

Can DepAegis be self-hosted?

Yes. Installation instructions cover Docker, Helm, and bare metal. Enterprise lists air-gapped, on-premise, and private-cloud deployment.

Which CI/CD integrations are listed?

DepAegis lists GitHub Actions, GitLab CI, and Jenkins, along with a CLI for publishing, scanning, and SBOM generation.

Facts from DepAegis's own pages

CI/CD integrations: The site lists GitHub Actions, GitLab CI, and Jenkins integrations, plus a CLI for publishing, scanning, and SBOM generation. · depaegis.com, 10 Oct 2026
Compliance: DepAegis lists EU Cyber Resilience Act reports with SBOM attestations, vulnerability summaries, and audit trails. · depaegis.com, 10 Oct 2026
Dependency firewall: The dependency firewall has eight built-in policy types and OPA Rego integration. · depaegis.com, 10 Oct 2026
Deployment: The installation instructions offer Docker, Helm, or bare-metal deployment; Enterprise lists air-gapped, on-premise, or private-cloud deployment. · depaegis.com, 10 Oct 2026
Documentation: The documentation page says its guides, API references, and tutorials are being written and invites users to contact the company for early access. · depaegis.com, 10 Oct 2026
Enterprise authentication: Enterprise lists Duende IdentityServer for OIDC/SAML and FIDO2/WebAuthn. · depaegis.com, 10 Oct 2026
Free plan limits: The free Community plan is limited to three users, five feeds, 50 packages, 1 GB of storage, and npm and NuGet registries. · depaegis.com, 10 Oct 2026
Package formats: The registry lists npm, NuGet, Maven, PyPI, Docker/OCI, Go Modules, and Helm support. · depaegis.com, 10 Oct 2026
Product: DepAegis describes itself as a private package registry for securing software supply chains. · depaegis.com, 10 Oct 2026
Supply chain security: The site says publishes include SLSA provenance, Sigstore signing, SBOM generation, and VEX/VDR compliance reports. · depaegis.com, 10 Oct 2026
Support: Listed support varies by plan: community support on Community, email support on Starter, priority support on Pro, and dedicated support on Enterprise. · depaegis.com, 10 Oct 2026
Vulnerability scanning: The site lists real-time OSV.dev and NVD scanning, secrets detection, license compliance, and typosquatting analysis. · depaegis.com, 10 Oct 2026

Where DepAegis stands on Freedom251

Artifact repository software#21 of 64