SafeDep vet

7.7easy start · #6of 66
in Software Composition Analysis Software

Free to practise onyes
Free trialyes
Well documentedyes
Runs where you workno

Runs on Linux, Mac, self-hosted. Paid plans from $100/mo.

SafeDep vet is ranked #6 of 66 in software composition analysis software on The Geeks Club. It runs on Linux, macOS, Self-hosted. There is a free plan. A free trial is offered. Paid plans start at $100/mo.

SafeDep vet plans and pricing

All plans

Free Free up to 3 endpoints · no card · no expiry · 7-day findings history · community support safedep.io · 10 Oct 2026

Team $100/mo billed monthly 5 endpoints at displayed price · 90-day findings history · 50 on-demand package scans/month · 125 on-demand repository scans/month · email support safedep.io · 10 Oct 2026

Enterprise volume endpoint pricing SSO · RBAC · MDM rollout · custom retention · SIEM/EDR integrations · dedicated support safedep.io · 10 Oct 2026

Compared on software composition analysis software

Free plan: Yes
Supported ecosystems: npm, PyPI, Maven, Go, Ruby, Rust, PHP; Docker and OCI container images; CycloneDX and SPDX SBOMs
SBOM generation: Yes
Pull request scanning: Yes
Deployment options: self_hosted

Best SafeDep vet alternatives

See all 20

Sonatype Nexus Repository Lesson 18.0 DepWarden Lesson 27.9 Xygeni Lesson 37.9 Safety CLI Lesson 47.8 FOSSA Lesson 57.7 Scantist Lesson 77.7

The record

Purpose: vet finds malicious packages, known vulnerabilities, risky CI workflows, lockfile tampering and fresh dependency versions before they reach production.
No-account operation: The vet CLI needs no account and sends no source code; it sends package ecosystem, name and version to SafeDep to retrieve package data.
Scanning targets: vet scans directories, Git repositories, container images, SBOMs, individual packages and tools installed on a machine.
Ecosystems: It reads manifests and lockfiles for npm, PyPI, Go, Maven, Gradle, Cargo, RubyGems, NuGet, Packagist, Pub and other ecosystems.
Policy: CEL policy rules determine when a scan fails, and users can test rules against a saved scan.
Inventory: vet inventories AI libraries and crypto algorithms called by code and can create CycloneDX xBOM and CBOM reports.
CI integrations: The project documents a GitHub Action for pull request checks and report support for GitLab and Bitbucket.
Output formats: The CLI can write SARIF from a saved scan, and the project describes SARIF for GitHub code scanning.
Install options: The repository lists installation through Homebrew, mise, Go install and a container image.
License: The GitHub repository identifies vet as licensed under Apache-2.0.
Release status: The repository says the v2 branch is in alpha and that vet v1 on main remains the latest release.
Threat intelligence: vet checks packages against SafeDep Threat Intel, which the README says analyzes new package versions when registries publish them.
Support: The project directs users to Discord and GitHub Discussions for questions, and its pricing page lists Community support for Free and Email support for Team.
Privacy and security: SafeDep's privacy policy says it uses TLS 1.2 or higher in transit and AES-256 encryption at rest, with SOC 2 Type II controls in progress.
Price from: $100/mo

Where it ranks on The Geeks Club

Best Software Composition Analysis Software in 2026#6 of 66

Is SafeDep vet yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote SafeDep vet

Sources

github.com/safedep/vet· checked 10 Oct 2026
safedep.io/privacy/· checked 10 Oct 2026
safedep.io/pricing/· checked 10 Oct 2026