Freedom251
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Vendor dashboard
No. 4 of 23 ·Software Supply Chain Security Software

DevGuard

Web · Windows · Mac · Linux · Self-hosted · API · paid plans from €449.10/mo

Visit site Alternatives

Freedom report

Three barsScore 6.6

  • Free tierA free tier is on its own pricing page
  • Open codeNo open-source code on record
  • Runs widely4 of 6 device platforms
  • DocumentedPlans, terms and facts published

DevGuard is an open-source developer security platform for hardening the software supply chain. It monitors deployed software for newly disclosed vulnerabilities and can create issues when new CVEs affect software. Risk scoring and exploit probability analysis help prioritize findings, while VEX assessment sharing supports false-positive reduction. DevGuard connects with GitHub and GitLab repositories, CI pipelines, and issue trackers, and can ingest SBOM, VEX, and SARIF inputs from compatible tools. Its scanner CLI supports software composition analysis, static application security testing, and signing attestations. A dependency firewall checks npm, Go, PyPI, and container image requests against a malicious-package database and blocks known-bad releases. The project also supports SBOM management, artifact signing, provenance attestations, and release policy gates. Its source is distributed under AGPL-3.0-or-later. The free self-hosted Open Source plan is for public projects with an OSI-approved license; non-commercial FLOSS projects can get SaaS free. Business SaaS costs 449.10 EUR per month on a one-year contract paid yearly.

Who it is for

DevGuard is aimed at developers, DevOps engineers, and security-conscious teams managing software supply-chain risks. The free self-hosted plan is specifically for public projects with an OSI-approved license.

What is good

  • Monitors deployed software for new vulnerabilities.
  • Ingests SBOM, VEX, and SARIF inputs.
  • Dependency firewall blocks known-bad releases.
  • Supports provenance attestations and release policy gates.

What to know first

  • Free self-hosted plan is restricted to qualifying public projects.
  • Business SaaS requires a one-year contract paid yearly.
  • Enterprise pricing requires a custom quote.

Verdict

DevGuard combines vulnerability monitoring, dependency checks, and supply-chain security workflows. The free plan has a public-project restriction, while Business SaaS is priced at 449.10 EUR per month on an annual contract.

DevGuard plans and pricing

All plans
Open Source Free Lifetime Public projects with OSI approved license · all features · community support · self-hosted devguard.org · 30 Sept 2026
Business SaaS €449.10/mo 1 year contract, paid yearly 10 users included · 4 hours monthly support · fully managed hosting in Germany · 1-hour setup workshop · 8×5 email support devguard.org · 30 Sept 2026
Enterprise Not published Custom quote Unlimited users, projects & assets · custom SLA · phone & chat support · on-premises or cloud devguard.org · 30 Sept 2026

Compared on software supply chain security software

Free plan
Yes
Source & repo security
Yes
Dependency analysis
Yes
SBOM management
Yes
Build provenance
Yes
Artifact signing
Yes
Provenance attestations
Yes
Release policy gates
Yes

Best DevGuard alternatives

See all 20
Two bars ActiveState Platform Free tier No. 1Free6.7 Two bars Sonatype Nexus Repository Free tier No. 2$162.50/mo6.7 Two bars Wisec Free tier No. 3€82.50/mo6.7 Two bars GUAC Free tier No. 5Free6.6 Two bars SafeDep Platform Free tier No. 6$100/mo6.6 Two bars StepSecurity Free tier No. 7$8/mo6.6