No. 4 of 66 ·Software Composition Analysis Software

DepWarden

Web · Windows · Mac · Linux · Self-hosted · API · paid plans from $19/mo

Freedom report

Three barsScore 6.6

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely4 of 6 device platforms
DocumentedPlans, terms and facts published

DepWarden is ranked #4 of 66 in software composition analysis software on Freedom251. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. A free trial is offered. Paid plans start at $19/mo.

DepWarden plans and pricing

All plans

Free Free Report-only scanning · no account · no API key · HTML report · cannot fail a build depwarden.in · 8 Oct 2026

Developer $19/mo $19 / month ($190 / year) One engineer · all report formats · build gating · fix paths depwarden.in · 8 Oct 2026

Team $99/mo $99 / month ($990 / year) A squad · SAST · scheduled delivery · VEX · IP-restricted keys depwarden.in · 8 Oct 2026

Business $399/mo $399 / month ($3,990 / year) An org · high volume · report branding · long retention depwarden.in · 8 Oct 2026

Enterprise Not published Contract Contract terms · self-hosted or air-gapped deployment depwarden.in · 8 Oct 2026

Compared on software composition analysis software

Free plan: Yes
Supported ecosystems: npm, PyPI, Maven, Gradle, Go, RubyGems, Cargo, NuGet, Composer, Dart (Pub), Swift
SBOM generation: Yes
Reachability analysis: No
Pull request scanning: Yes
Deployment options: hybrid

Best DepWarden alternatives

See all 20

Two bars Snyk Open Source Free tier No. 1$25/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Accessibility Test Framework for Android Free tier No. 3Free6.6 Two bars Docker Desktop Free tier No. 5$9/mo6.6 Two bars Endor Labs Free tier No. 6Free6.6 Two bars OpenSCA Free tier No. 7Free6.6

The record

Product: DepWarden is a software composition analysis tool that scans dependency manifests against vulnerability, exploitability, supply-chain, package health, and license data.
Prioritization: It ranks findings using CISA KEV, FIRST EPSS, fix availability, and dependency depth, and provides a copy-paste upgrade command.
SAST: The About page says DepWarden combines SCA and SAST and scans source code across 15 languages plus infrastructure-as-code formats with 300+ rules.
SBOM and compliance: It accepts CycloneDX or SPDX SBOMs and exports an SBOM, an OpenVEX document, and a NOTICE license file.
Ecosystems: The site lists npm, PyPI, Maven, Gradle, Go, RubyGems, Cargo, NuGet, Composer, Dart, and Swift support for manifests, lockfiles, and SBOMs.
Repository integrations: Users can connect GitHub, GitLab, Bitbucket, or Azure DevOps branches for scans and scheduled email reports; the page says no token is retained beyond the scan.
Build tools: The plugins page lists Maven, npm/yarn/pnpm, and GitHub Actions as available, with the npm CLI usable in GitLab CI, Jenkins, CircleCI, and Azure Pipelines.
Privacy: The privacy policy says anonymous scans use a session-isolated workspace and the service does not receive or store application source code or compiled binaries.
Data residency: The hosted service runs in Oracle Cloud Infrastructure's Mumbai region, and the trust page says EU or US data residency is not currently offered for hosted service.
Security controls: The trust page lists TLS with HSTS, salted password hashing, optional TOTP, role-based access control, append-only audit logging, and SCIM 2.0 for organization deployments.
Certifications: DepWarden states it does not hold SOC 2, ISO 27001, or equivalent third-party attestation and has not commissioned an independent penetration test.
Service availability: The trust page says the hosted service is single-region, has no published self-serve uptime SLA, and has no public status page.
Support: The contact page lists support hours as Monday to Friday, 10:00–18:00 IST, and gives Ghatkopar, Mumbai, Maharashtra, India as the operating address.
Intended users: The About page identifies individual developers, open-source maintainers, security engineers, teams building CI gates, and compliance teams as intended users.
Price from: $19/mo

Where it ranks on Freedom251

Best Software Composition Analysis Software in 2026#4 of 66

Is DepWarden yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote DepWarden

Sources

depwarden.in· checked 8 Oct 2026
depwarden.in/about· checked 8 Oct 2026
depwarden.in/github-action-security-scan· checked 8 Oct 2026
depwarden.in/plugins· checked 8 Oct 2026
depwarden.in/privacy· checked 8 Oct 2026
depwarden.in/trust· checked 8 Oct 2026
depwarden.in/contact· checked 8 Oct 2026
depwarden.in/pricing· checked 8 Oct 2026