SafeDep vet
The facts below are what the maker publishes about SafeDep vet, checked and dated. Our editors have not written about it yet.
Plans and prices
From SafeDep vet's own pricing page, checked 10 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | up to 3 endpoints · no card · no expiry · 7-day findings history · community support |
| Team | $100 a month | 5 endpoints at displayed price · 90-day findings history · 50 on-demand package scans/month · 125 on-demand repository scans/month · email support · billed monthly |
| Enterprise | Priced on request | SSO · RBAC · MDM rollout · custom retention · SIEM/EDR integrations · dedicated support · volume endpoint pricing |
The facts
Each one read from SafeDep vet's own pages, with the date it was checked.
What it does
- CI integrations
- The project documents a GitHub Action for pull request checks and report support for GitLab and Bitbucket.checked 10 Oct 2026
- Ecosystems
- It reads manifests and lockfiles for npm, PyPI, Go, Maven, Gradle, Cargo, RubyGems, NuGet, Packagist, Pub and other ecosystems.checked 10 Oct 2026
- Install options
- The repository lists installation through Homebrew, mise, Go install and a container image.checked 10 Oct 2026
- Inventory
- vet inventories AI libraries and crypto algorithms called by code and can create CycloneDX xBOM and CBOM reports.checked 10 Oct 2026
- License
- The GitHub repository identifies vet as licensed under Apache-2.0.checked 10 Oct 2026
- No-account operation
- The vet CLI needs no account and sends no source code; it sends package ecosystem, name and version to SafeDep to retrieve package data.checked 10 Oct 2026
- Output formats
- The CLI can write SARIF from a saved scan, and the project describes SARIF for GitHub code scanning.checked 10 Oct 2026
- Policy
- CEL policy rules determine when a scan fails, and users can test rules against a saved scan.checked 10 Oct 2026
- Privacy and security
- SafeDep's privacy policy says it uses TLS 1.2 or higher in transit and AES-256 encryption at rest, with SOC 2 Type II controls in progress.checked 10 Oct 2026
- Purpose
- vet finds malicious packages, known vulnerabilities, risky CI workflows, lockfile tampering and fresh dependency versions before they reach production.checked 10 Oct 2026
- Release status
- The repository says the v2 branch is in alpha and that vet v1 on main remains the latest release.checked 10 Oct 2026
- Scanning targets
- vet scans directories, Git repositories, container images, SBOMs, individual packages and tools installed on a machine.checked 10 Oct 2026
- Support
- The project directs users to Discord and GitHub Discussions for questions, and its pricing page lists Community support for Free and Email support for Team.checked 10 Oct 2026
- Threat intelligence
- vet checks packages against SafeDep Threat Intel, which the README says analyzes new package versions when registries publish them.checked 10 Oct 2026
Alternatives to SafeDep vet
- 1
DeepFilterNet
Free planOpen sourceAPILinuxmacOSSelf-hosted7.6Free plan - 2
Endor Labs
Free planWebAPIExtensionLinux7.4Free plan - 3
Grype
Free planOpen sourceLinuxmacOSSelf-hostedWindows7.4Free plan - 4
Scantist
Free planWebAPISelf-hosted7.3$200 one-time - 5
Snyk Open Source
Free planWebAPILinuxmacOS7.3From $25 a month - 6
Socket
Free planWebAPIExtensionLinux7.2From $25 a month