Freedom251 › Software Composition Analysis Software
VersionEye
What VersionEye is
VersionEye is a cloud service that checks open source dependencies for security vulnerabilities, license compliance, and outdated versions. It checks multiple security databases every day for vulnerable artifacts. Native plugins can break a CI/CD build when a dependency has a known security vulnerability. License checks compare dependencies with a whitelist and can notify users about violations. An HTTP POST API accepts dependency files and returns key metrics plus a link to a full report. Upload scans list npm, Composer, Ruby Bundler, and Python dependency files, with supported ecosystems including Python, Ruby, Node.js, and PHP. Users can configure SMS or email notifications for vulnerabilities and license issues. The first five scans are free. Business customers can pay €1 per file scan, billed monthly, or choose a €50.00 per month subscription with 200 included scans and €0.25 additional scans. SMS costs €0.25; email costs €0. Both plans allow unlimited users.
Who it suits
It suits business teams managing Python, Ruby, Node.js, or PHP dependencies that need vulnerability and license checks. API users and CI/CD workflows can use its upload and build-integration options.
What it does well
- Daily checks across multiple security databases
- Can break CI/CD builds for known vulnerabilities
- License whitelist monitoring
- HTTP POST API with report links
- First five scans are free
What to know first
- Pricing is aimed exclusively at businesses
- Each file scan becomes chargeable after inclusions
- No SBOM generation
- No pull request scanning
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Pay per use | per file scan; billed monthly · First 5 scans free · 0 included scans · 1 € per file scan · SMS 0,25 € · email 0 € · unlimited users | €1, paid once |
| Subscription | monthly · 200 included file scans · additional scans 0,25 € each · SMS 0,25 € · email 0 € · unlimited users | €50 a month |
As versioneye.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
VersionEye focuses on dependency vulnerability, license, and version monitoring with API, notification, and CI/CD options. Review scan volumes and business-only pricing before selecting a plan.
Facts from VersionEye's own pages
- API
- Users can send dependency files to its API by HTTP POST and receive key metrics and a link to a full report. · versioneye.com, 11 Oct 2026
- Billing limit
- Pricing is based on file scans, with each scanned package manager file counted as a chargeable transaction after included scans. · versioneye.com, 11 Oct 2026
- Build integration
- Native plugins can break a CI/CD build when a dependency has a known security vulnerability. · versioneye.com, 11 Oct 2026
- Free scans
- The first five scans are free. · versioneye.com, 11 Oct 2026
- Headquarters
- Mannheim, Germany · versioneye.com, 28 Sept 2026
- License compliance
- It checks open source dependencies against a license whitelist and can notify users about violations. · versioneye.com, 11 Oct 2026
- Notifications
- Users can configure rules that send SMS or email notifications about vulnerabilities or license violations. · versioneye.com, 11 Oct 2026
- Pricing audience
- The pricing offer is aimed exclusively at business customers. · versioneye.com, 11 Oct 2026
- Purpose
- VersionEye checks open source dependencies for security vulnerabilities, license compliance, and outdated versions. · versioneye.com, 11 Oct 2026
- Security checks
- It says it checks multiple security databases every day for vulnerable artifacts. · versioneye.com, 11 Oct 2026
- Supported files
- The homepage lists npm, Composer, Ruby Bundler, and Python dependency file formats for its upload scan. · versioneye.com, 11 Oct 2026