No. 20of 66 ·Software Composition Analysis Software

SafeDep vet

Mac · Linux · Self-hosted· paid plans from $100/mo

Freedom report

Two barsScore 6.5

Free tierA free tier is on its own pricing page
Runs widely2 of 6 device platforms
DocumentedPlans, terms and facts published

SafeDep vet is ranked #20 of 66 in software composition analysis software on Freedom251. It runs on Linux, macOS, Self-hosted. There is a free plan. A free trial is offered. Paid plans start at $100/mo.

SafeDep vet plans and pricing

All plans

Free Free up to 3 endpoints · no card · no expiry · 7-day findings history · community support safedep.io · 10 Oct 2026

Team $100/mo billed monthly 5 endpoints at displayed price · 90-day findings history · 50 on-demand package scans/month · 125 on-demand repository scans/month · email support safedep.io · 10 Oct 2026

Enterprise volume endpoint pricing SSO · RBAC · MDM rollout · custom retention · SIEM/EDR integrations · dedicated support safedep.io · 10 Oct 2026

Compared on software composition analysis software

Free plan: Yes
Supported ecosystems: npm, PyPI, Maven, Go, Ruby, Rust, PHP; Docker and OCI container images; CycloneDX and SPDX SBOMs
SBOM generation: Yes
Pull request scanning: Yes
Deployment options: self_hosted

Best SafeDep vet alternatives

See all 20

Two bars ScanCode.io Free tier No. 1Free6.7 Two bars Snyk Open Source Free tier No. 2$25/mo6.7 Two bars Sonatype Nexus Repository Free tier No. 3$162.50/mo6.7 Two bars Accessibility Test Framework for Android Free tier No. 4Free6.6 Two bars DepWarden Free tier No. 5$19/mo6.6 Two bars Docker Desktop Free tier No. 6$9/mo6.6

The record

Purpose: vet finds malicious packages, known vulnerabilities, risky CI workflows, lockfile tampering and fresh dependency versions before they reach production.
No-account operation: The vet CLI needs no account and sends no source code; it sends package ecosystem, name and version to SafeDep to retrieve package data.
Scanning targets: vet scans directories, Git repositories, container images, SBOMs, individual packages and tools installed on a machine.
Ecosystems: It reads manifests and lockfiles for npm, PyPI, Go, Maven, Gradle, Cargo, RubyGems, NuGet, Packagist, Pub and other ecosystems.
Policy: CEL policy rules determine when a scan fails, and users can test rules against a saved scan.
Inventory: vet inventories AI libraries and crypto algorithms called by code and can create CycloneDX xBOM and CBOM reports.
CI integrations: The project documents a GitHub Action for pull request checks and report support for GitLab and Bitbucket.
Output formats: The CLI can write SARIF from a saved scan, and the project describes SARIF for GitHub code scanning.
Install options: The repository lists installation through Homebrew, mise, Go install and a container image.
License: The GitHub repository identifies vet as licensed under Apache-2.0.
Release status: The repository says the v2 branch is in alpha and that vet v1 on main remains the latest release.
Threat intelligence: vet checks packages against SafeDep Threat Intel, which the README says analyzes new package versions when registries publish them.
Support: The project directs users to Discord and GitHub Discussions for questions, and its pricing page lists Community support for Free and Email support for Team.
Privacy and security: SafeDep's privacy policy says it uses TLS 1.2 or higher in transit and AES-256 encryption at rest, with SOC 2 Type II controls in progress.
Price from: $100/mo

Where it ranks on Freedom251

Best Software Composition Analysis Software in 2026#20 of 66

Is SafeDep vet yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote SafeDep vet

Sources

github.com/safedep/vet· checked 10 Oct 2026
safedep.io/privacy/· checked 10 Oct 2026
safedep.io/pricing/· checked 10 Oct 2026