Endor Labs

7.1easy start · #9 of 65
in Software Composition Analysis Software

Free to practise onyes
Free trialnot on record
Well documentedyes
Runs where you workyes

Runs on api, Linux, Mac, Web, Windows.

Endor Labs is ranked #9 of 65 in software composition analysis software on The Geeks Club. It runs on API, Linux, macOS, Web, Windows. There is a free plan.

Endor Labs plans and pricing

All plans

Developer Free FREE Individual developers · local scans via AURI MCP server · no account required · no UI, policies, or scan history endorlabs.com · 3 Oct 2026

Core Not published Contact sales Paid team tier · reachability · prioritization · policies · pricing is seat-based endorlabs.com · 3 Oct 2026

Pro Not published Contact sales Paid team tier · advanced vulnerability detection, triage, and remediation across application layers · pricing is seat-based endorlabs.com · 3 Oct 2026

Compared on software composition analysis software

Free plan: Yes

Best Endor Labs alternatives

See all 12

Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 18.0 Xygeni 0 of 4 in the starter kit Lesson 27.9 FOSSA 0 of 4 in the starter kit Lesson 37.7 Snyk Open Source 0 of 4 in the starter kit Lesson 47.4 Docker Desktop 0 of 4 in the starter kit Lesson 57.3 Socket 0 of 4 in the starter kit Lesson 67.3

The record

Product: Endor Labs describes its platform as an application security platform spanning coding agents, code, secrets, dependencies, package firewall, and container images.
AURI: AURI for Developers helps scan and fix vulnerabilities, detect secrets, and block malicious dependencies in an AI coding workflow.
Scanning: Endor Code provides AI SAST and secrets detection, while Endor Open Source provides reachability-based SCA, malicious package detection, AI model governance, and SBOM and VEX generation.
Agent governance: The platform can inventory coding agents, models, MCP servers, and skills and enforce policies on agent actions.
Integrations: The site lists integrations including GitHub, GitLab, Bitbucket, CircleCI, Jenkins, Jira, Slack, Vanta, Cursor, Claude, Gemini, and GitHub Copilot.
Deployment: Customers can scan through cloud apps, inside CI/CD runners, or use Endor Outpost for scheduled monitoring scans and on-premises deployment.
Source code handling: Endor Labs says it does not store customer source code; cloud scanning briefly clones code to a container and destroys it after scanning, while CI/CD scanning keeps code in the runner.
Free tier limits: The Developer tier scans locally and provides read-only access to vulnerability data, without a UI, policies, or scan history.
Paid plan limits: Paid plans use annual fair usage quotas based on purchased seats, and the page says users are not blocked from scanning when they exceed those limits.
Pricing model: Pricing is seat-based; for Endor Code and Endor Open Source, a contributing developer is someone who committed to a monitored repository within the last 90 days.
Support: Endor Labs offers multiple Technical Success tiers tailored to team needs and deployment complexity.
Security controls: AURI agents run on the customer's infrastructure, are read-only by default, and ask for approval before mutating actions.
Developer platforms: The endorctl CLI installation instructions cover macOS through Homebrew, Linux, and Windows, and the product also offers a web UI and REST API for paid plans.
Company history: Endor Labs says it was founded in Palo Alto, California, in 2021.
Price from: Free

Where it ranks on The Geeks Club

Best Software Composition Analysis Software in 2026#9 of 65
Best DevSecOps Platforms in 2026#9 of 26
Best Dependency Management Software in 2026#11 of 25
Best Secrets Scanning Software in 2026#9 of 23

Is Endor Labs yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Endor Labs

Sources

endorlabs.com· checked 3 Oct 2026
endorlabs.com/platform/developer· checked 3 Oct 2026
endorlabs.com/pricing· checked 3 Oct 2026
endorlabs.com/about· checked 3 Oct 2026