
Endor Labs
7.4#2 in software composition analysis softwareFree planFree planWebAPIExtensionLinux
Visit

| Fact | Endor Labs | ggshield |
|---|---|---|
| Founded | 2021 | 2017 |
| Headquarters | Palo Alto, California, United States | Paris, France |
| Scanning | Endor Code provides AI SAST and secrets detection, while Endor Open Source provides reachability-based SCA, malicious package detection, AI model governance, and SBOM and VEX generation. | ggshield can scan local files and repositories, run as a pre-commit hook, run in CI, and run in a pre-receive hook for self-managed version control instances. |
It suits development and security teams that need to scan code and dependencies or govern AI coding agents. The free tier may suit individual developers who want local scans.
It suits developers and teams who want to scan code repositories, commit workflows, CI pipelines, or Docker files for hardcoded secrets. Self-managed version-control operators can also use its pre-receive hook.