Freedom251 › Software Composition Analysis Software
Vulert
What Vulert is
Vulert monitors open-source dependencies for known vulnerabilities and alerts users when newly disclosed issues affect applications. It scans uploaded dependency manifests or CycloneDX and SPDX SBOM files without requiring installation, repository access, or source-code access. Supported ecosystems include Java, JavaScript, PHP, Python, Go, Rust, Ruby, Dart, C/C++, and Elixir. Findings show affected packages and remediation guidance, while Growth and Enterprise add version-specific recommended fixes. CI/CD setup lists GitHub Actions, GitLab CI, Bitbucket Pipelines, Jenkins, and CircleCI, with release blocking based on findings. Vulert MCP connects Codex, Claude Code, Cursor, and VS Code/Copilot. Email alerts are available across plans; Growth and Enterprise add Jira and Slack. Pro costs $15 a month per monitored app, Growth $25 a month, and Enterprise uses custom pricing. A 30-day trial requires no credit card.
Who it suits
Vulert suits development, security, and compliance teams monitoring dependencies across supported ecosystems. It also fits teams using CI/CD pipelines or listed coding-agent integrations.
What it does well
- Agentless scanning uses manifests or SBOM files
- Supports ten listed programming ecosystems
- Offers CI/CD integrations and release blocking
- Provides vulnerability details and fix guidance
- 30-day trial requires no credit card
What to know first
- Pro and Growth pricing is per monitored app
- Version-specific fixes require Growth or Enterprise
- Enterprise pricing is custom
- Compliance support does not certify compliance
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Pro | Monthly; $12.75 per monitored app/month billed annually is also shown on the homepage. The pricing page FAQ conflicts, listing $45/month or $39/month billed annually. · Per monitored app · hourly monitoring · unlimited users · vulnerability details and fix guidance · email alerts · API, MCP, and CI/CD | $15 a month |
| Growth | Monthly; pricing page says yearly billing saves 13% but does not show a yearly amount for this plan. · Per monitored app · everything in Pro · recommended fixes · Jira integration · Slack alerts · PDF and audit reports · unlimited users | $25 a month |
| Enterprise | Custom pricing · Custom application count · hourly or custom monitoring cadence · everything in Growth · custom onboarding and support · unlimited users | On request |
As vulert.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
Vulert provides cloud-based dependency monitoring through web and API access, with agentless uploads and multiple CI/CD integrations. Its plan choice determines remediation detail and Jira or Slack connectivity.
Facts from Vulert's own pages
- Agentless scanning
- Users upload a dependency manifest or SBOM; Vulert says it does not require installation, repository connection, or source-code access. · vulert.com, 11 Oct 2026
- Alerts and integrations
- The pricing comparison lists email alerts across plans, while Jira integration and Slack alerts are included in Growth and Enterprise. · vulert.com, 11 Oct 2026
- CI/CD integrations
- The CI/CD setup page lists GitHub Actions, GitLab CI, Bitbucket Pipelines, Jenkins, and CircleCI, with an option to use findings to stop a release. · vulert.com, 11 Oct 2026
- Coding agents
- Vulert MCP supports Codex, Claude Code, Cursor, and VS Code/Copilot, and binds each connection to an application and manifest filename. · mcp.vulert.com, 11 Oct 2026
- Company history
- Vulert says it began in 2022 and transitioned operations to Vulert Ltd in 2025. · vulert.com, 11 Oct 2026
- Company location
- Vulert lists its address as 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF. · vulert.com, 11 Oct 2026
- Compliance
- Vulert says its vulnerability findings, remediation guidance, and monitoring records can support internal security and compliance processes, but do not certify compliance on their own. · vulert.com, 11 Oct 2026
- Founded
- 2022 · vulert.com, 28 Sept 2026
- Headquarters
- London, England, United Kingdom · vulert.com, 28 Sept 2026
- Purpose
- Vulert monitors open-source dependencies for known vulnerabilities and alerts users when newly disclosed issues affect their applications. · vulert.com, 11 Oct 2026
- Remediation
- Vulert provides affected-package details and fix guidance, including version-specific recommended fixes on Growth and Enterprise plans. · vulert.com, 11 Oct 2026
- Security handling
- The CI/CD page says its generated configuration sends the selected dependency file and application key to Vulert, not source code, repository credentials, or build logs. · vulert.com, 11 Oct 2026
- Support
- Enterprise includes custom onboarding and support; Vulert also offers demos for engineering, security, or compliance teams. · vulert.com, 11 Oct 2026
- Supported inputs
- The scanner lists manifests for Java, JavaScript, PHP, Python, Go, Rust, Ruby, Dart, C/C++, and Elixir, plus CycloneDX and SPDX SBOM files. · vulert.com, 11 Oct 2026
- Trial
- Vulert offers 30 days of continuous monitoring with Growth features and says no credit card is required. · vulert.com, 11 Oct 2026
- Trial end
- The homepage FAQ says users can choose a paid plan before the trial ends and no subscription is created automatically if they do not continue. · vulert.com, 11 Oct 2026