Freedom251
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Vendor dashboard

Endor Labs

Endor Labs is an application security platform that covers code, secrets, dependencies, container images and AI coding agents. AURI for Developers helps scan for vulnerabilities, detect secrets and block malicious dependencies during AI coding workflows. Endor Code provides AI-based static application security testing and secrets detection; Endor Open Source adds reachability-based analysis, malicious package detection, AI model governance, and SBOM and VEX generation. Teams can inventory coding agents, models, MCP servers and skills, then set policies for agent actions. Scanning options include cloud apps, CI/CD runners and Endor Outpost for scheduled monitoring or on-premises deployment. The company says cloud scanning briefly clones code to a container that is destroyed after scanning; CI/CD scans keep code in the runner. Its free Developer tier offers local scans and read-only vulnerability data, but no UI, policies or scan history. Paid Core and Pro plans require contacting sales. The platform supports Linux, macOS, Windows, web and API, and lists integrations such as GitHub, GitLab, Jenkins, Jira and coding assistants.

Who it is for

It suits development and security teams that need scanning across code, dependencies and AI coding workflows. The free tier is aimed at individual developers comfortable with local scans and no UI, policies or scan history.

What is good

  • Free Developer tier offers local scans.
  • Can inventory agents, models, MCP servers and skills.
  • Scanning supports cloud, CI/CD runners and on-premises deployment.
  • Generates SBOM and VEX.
  • Paid plans include policies.

What to know first

  • Free tier has no UI or scan history.
  • Free tier does not include policies.
  • Paid plan prices require contacting sales.
  • No free trial is listed.

Verdict

Endor Labs brings source, dependency and agent-security capabilities into one platform, with several deployment options. The free tier is limited, and teams considering paid plans need to contact sales for pricing.

Endor Labs plans and pricing

All plans
Developer Free FREE Individual developers · local scans via AURI MCP server · no account required · no UI, policies, or scan history endorlabs.com · 3 Oct 2026
Core Not published Contact sales Paid team tier · reachability · prioritization · policies · pricing is seat-based endorlabs.com · 3 Oct 2026
Pro Not published Contact sales Paid team tier · advanced vulnerability detection, triage, and remediation across application layers · pricing is seat-based endorlabs.com · 3 Oct 2026

Compared on software composition analysis software

Free plan
Yes

Best Endor Labs alternatives

See all 12
Snyk Open Source Free plan apiLinuxMacWebWin $25/mo6.7 Sonatype Nexus Repository Free plan apiLinuxMacself-hostedWeb $162.50/mo6.7 Accessibility Test Framework for Android Free plan AndroidLinuxMacWin Free6.6 Docker Desktop Free plan LinuxMacWebWin $9/mo6.6 Socket Free plan apiextensionLinuxMacself-hosted $25/mo6.6 Xygeni Free plan apiextensionLinuxMacself-hosted Free6.6