Safety CLI
Safety CLI detects vulnerable dependencies and helps remediate them, with scans described for Python, Java, and JavaScript.
What Safety CLI is
Safety CLI detects vulnerable dependencies and helps remediate them, with scans described for Python, Java, and JavaScript. It prioritizes findings by code risk using reachability analysis and verified fix recommendations. Safety says its proprietary vulnerability database detects four times more security issues than public sources. Scans can run on development machines, CI/CD pipelines, or in production, and integrations include GitHub, GitLab, Docker, and Bitbucket. A GitHub Action supports CI/CD scans. Installation uses `pip install safety`, authentication, and `safety scan`; Python 3.8 and later are supported, with a documented Docker option for older versions. The CLI supports Linux, macOS, Windows, and self-hosted deployment, and can generate SBOMs. The Free plan is for non-commercial individual or educational use and includes one developer, one codebase, and 100 scans monthly.
Good
- Reachability-based risk prioritization
- Verified fix recommendations
- GitHub Action for CI/CD scans
- SBOM generation
- Self-hosted deployment available
Watch out
- Free plan allows one codebase
- Free plan limits scans to 100 monthly
- Free plan is non-commercial
- Python support starts at 3.8
Who it suits
Safety CLI suits developers and teams scanning Python, Java, or JavaScript dependencies in development, CI/CD, or production. The free plan is limited to non-commercial individual or educational use.
Verdict
Safety CLI combines dependency scanning, risk-based prioritization, and integrations across development and deployment environments. Review the free-plan limits and paid support tiers to match your organization’s use.
Plans and prices
From Safety CLI's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | 1 developer · 1 codebase · 100 scans/month · non-commercial use · public vulnerability data · email support with 48-hour response · $0/dev/month; free forever |
| Team | $25 a month | Up to 20 contributing developers · 25 codebases · 5,000 scans/month · proprietary vulnerability data · priority email and chat support with 4-hour response · $25/dev/month or $240 per year |
| Enterprise | Priced on request | Unlimited contributing developers · unlimited codebases · up to 20,000 scans/month · dedicated account manager · 24/7 priority support · Contact Us for pricing |
The facts
Each one read from Safety CLI's own pages, with the date it was checked.
The company
- Company location
- Safety says it was founded in Vancouver and is building technology for secure use of open-source software.checked 7 Oct 2026
- Headquarters
- Vancouver, British Columbia, Canadachecked 28 Sep 2026
What it does
- Enterprise features
- The Enterprise plan includes onboarding and security best-practice training, advanced security reporting, and AI-powered insights.checked 7 Oct 2026
- Installation
- The CLI page instructs users to install Safety with pip install safety, authenticate, and run safety scan.checked 7 Oct 2026
- Integrations
- Safety says it works with GitHub, GitLab, Docker, and Bitbucket, and provides a GitHub Action for CI/CD scans.checked 7 Oct 2026
- Purpose
- Safety CLI detects and helps remediate vulnerable dependencies, and the CLI page describes scanning for Python, Java, and JavaScript.checked 7 Oct 2026
- Python requirement
- The CLI page states that Safety supports Python versions 3.8 and later, with a Docker option for older versions described in its documentation.checked 7 Oct 2026
- Risk prioritization
- The CLI prioritizes vulnerabilities based on code risk using reachability analysis and verified fix recommendations.checked 7 Oct 2026
- Scan locations
- Safety says CLI scans can run on development machines, in CI/CD pipelines, and in production.checked 7 Oct 2026
- Support
- The pricing page lists 48-hour email support for Free, 4-hour priority email and chat support for Team, and 24/7 priority support for Enterprise.checked 7 Oct 2026
- Vulnerability intelligence
- Safety says its proprietary vulnerability database detects four times more security issues than public sources.checked 7 Oct 2026
Money
- Free plan limits
- The free plan is designed for non-commercial use and individual or educational use, with one codebase, one user, and 100 monthly scans.checked 7 Oct 2026
Where it runs
- Security approach
- Safety says its cybersecurity researchers monitor package releases and code changes, verify fixes, and provide technical advisories for vulnerabilities.checked 7 Oct 2026
Alternatives to Safety CLI
- 1
DeepFilterNet
Free planOpen sourceAPILinuxmacOSSelf-hosted7.6Free plan - 2
Endor Labs
Free planWebAPIExtensionLinux7.4Free plan - 3
Grype
Free planOpen sourceLinuxmacOSSelf-hostedWindows7.4Free plan - 4
Scantist
Free planWebAPISelf-hosted7.3$200 one-time - 5
Snyk Open Source
Free planWebAPILinuxmacOS7.3From $25 a month - 6
Socket
Free planWebAPIExtensionLinux7.2From $25 a month