DevGuard

7.9easy start · #3 of 23
in Software Supply Chain Security Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, self-hosted, Web, Windows. Paid plans from €449.10/mo.

DevGuard is ranked #3 of 23 in software supply chain security software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. A free trial is offered. Paid plans start at €449.10/mo.

DevGuard plans and pricing

All plans

Open Source Free Lifetime Public projects with OSI approved license · all features · community support · self-hosted devguard.org · 30 Sept 2026

Business SaaS €449.10/mo 1 year contract, paid yearly 10 users included · 4 hours monthly support · fully managed hosting in Germany · 1-hour setup workshop · 8×5 email support devguard.org · 30 Sept 2026

Enterprise Not published Custom quote Unlimited users, projects & assets · custom SLA · phone & chat support · on-premises or cloud devguard.org · 30 Sept 2026

Compared on software supply chain security software

Free plan: Yes
Source & repo security: Yes
Dependency analysis: Yes
SBOM management: Yes
Build provenance: Yes
Artifact signing: Yes
Provenance attestations: Yes
Release policy gates: Yes

Best DevGuard alternatives

See all 12

ActiveState Platform 0 of 4 in the starter kit Lesson 18.0 Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 28.0 StepSecurity 0 of 4 in the starter kit Lesson 47.9 SafeDep Platform 0 of 4 in the starter kit Lesson 57.8 Kusari 0 of 4 in the starter kit Lesson 67.5 Chainloop 0 of 4 in the starter kit Lesson 77.2

The record

Purpose: DevGuard is an open-source developer security platform for hardening the software supply chain.
Vulnerability management: It monitors deployed software for newly disclosed vulnerabilities and can automatically create issues when new CVEs affect software.
Risk and VEX: It prioritizes risk using scoring and exploit probability analysis, and supports VEX assessment sharing to reduce false positives.
Integrations: The homepage says DevGuard connects with GitLab and GitHub repositories, CI pipelines, and issue trackers.
Open standards: DevGuard can ingest inputs from scanners or tools that support SBOM, VEX, and SARIF.
CLI: The devguard-scanner CLI supports software composition analysis, static application security testing, and signing attestations.
Dependency firewall: The dependency firewall checks npm, Go, PyPI, and container image requests against a malicious package database and blocks known-bad releases.
Supported users: The documentation describes DevGuard as built for developers, DevOps engineers, and security-conscious teams.
Security and compliance: The documentation says DevGuard helps meet software development requirements for standards such as ISO/IEC 27001 and PCI-DSS.
Support: The open-source plan includes community support; Business SaaS includes monthly support hours and 8×5 email support.
Notable plan limit: The free Open Source plan is for public projects with an OSI-approved license; non-commercial FLOSS projects can get SaaS free.
License: The project documentation says DevGuard source code is distributed under AGPL-3.0-or-later.
Maker: The site footer identifies L3montree GmbH and the DevGuard Contributors; the project timeline lists its first line of code in June 2023.
Founded: 2023
Price from: €449.10/mo

Where it ranks on The Geeks Club

Best Software Supply Chain Security Software in 2026#3 of 23

Is DevGuard yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote DevGuard

Sources

devguard.org· checked 30 Sept 2026
devguard.org/dependency-proxy· checked 30 Sept 2026
docs.devguard.org· checked 30 Sept 2026
devguard.org/about· checked 30 Sept 2026