Wisec

6.0easy start · #14 of 23
in Software Supply Chain Security Software

Free to practise onnot on record
Free trialnot on record
Well documentedyes
Runs where you worknot on record

Runs on api, Linux, Mac, self-hosted, Web, Windows. Paid plans from €82.50/mo.

Wisec is ranked #14 of 23 in software supply chain security software on The Geeks Club. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. A free trial is offered. Paid plans start at €82.50/mo.

Wisec plans and pricing

All plans

Free Free 3 projects · 1,000 builds/month · 30 days history · 1 PDF certificate/month · Community support wisec.io · 5 Oct 2026

Business €990/yr €990/yr (founder rate); standard rate €5,000/yr from 2027 10 projects · 20,000 builds/month · 1 year history · Email support (48h response) wisec.io · 5 Oct 2026

Pro €2,990/yr €2,990/yr (founder rate); standard rate €15,000/yr from 2027 Unlimited projects and builds · Lifetime archives · Priority support (24h response) wisec.io · 5 Oct 2026

Enterprise Not published Custom quote Unlimited projects and builds · On-premise or private cloud deployment · Dedicated 24/7 priority support · Custom billing wisec.io · 5 Oct 2026

Compared on software supply chain security software

Free plan: Yes
Source & repo security: Yes
Dependency analysis: Yes
SBOM management: Yes
Build provenance: Yes
Provenance attestations: Yes
Release policy gates: Yes

Best Wisec alternatives

See all 20

ActiveState Platform 0 of 4 in the starter kit Lesson 18.0 Sonatype Nexus Repository 0 of 4 in the starter kit Lesson 28.0 DevGuard 0 of 4 in the starter kit Lesson 37.9 StepSecurity 0 of 4 in the starter kit Lesson 47.9 SafeDep Platform 0 of 4 in the starter kit Lesson 57.8 Kusari 0 of 4 in the starter kit Lesson 67.5

The record

Purpose: Wisec collects, signs, and preserves software build evidence such as provenance, SBOM, SLSA, and VEX for Cyber Resilience Act readiness.
Cryptographic records: Builds are linked in a chain and signed with Ed25519, with SLSA provenance and public Sigstore/Rekor timestamping.
SBOM and VEX: It generates signed CycloneDX SBOMs and signed VEX documents describing the exploitability status of detected CVEs.
Anomaly detection: Eleven rules run on every build, including five calibrated to project history and six for known-bad patterns.
CI integrations: Dedicated CI/CD support is listed for GitLab CI, GitHub Actions, Jenkins, and Azure DevOps; CircleCI and Travis CI are described as coming soon.
Scanner imports: Wisec imports SARIF v2.1.0 findings from CodeQL, Semgrep, Snyk, Trivy, or other SARIF-compatible tools.
Policy gate: Users can define block or warn policies for secrets, vulnerable dependencies, unapproved contributors, risk thresholds, and CVE severity, enforced at the CI gate.
Compliance evidence: Wisec maps evidence to NIS2, SOC2, ISO 27001, and CRA and can export audit-ready PDF reports; for CRA and ISO 27001 it says this is evidence mapping, not a conformity claim.
Security and residency: The maker says data is encrypted in transit and at rest, platform data is hosted in France, and data residency is 100% in the EU.
Source code handling: Wisec says its agent runs in CI and does not clone repositories; since agent v1.2.0 it withholds scanner-quoted code before sending findings.
Open-source agent: The CI agent is open source under Apache-2.0, while the platform is managed and hosted in the EU.
Self-hosting: Self-hosting is available to Enterprise customers, with on-premise or private cloud deployment listed.
Support: Free includes community support, Business lists email support with a 48-hour response, Pro lists priority support with a 24-hour response, and Enterprise lists dedicated 24/7 priority support.
Target users: The Free plan is described for small projects and security exploration, Business for growing teams requiring notarization, and Pro for organizations demanding full control.
Price from: €82.50/mo

Where it ranks on The Geeks Club

Best Software Supply Chain Security Software in 2026#14 of 23

Is Wisec yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Wisec

Sources

wisec.io· checked 5 Oct 2026
wisec.io/pricing· checked 5 Oct 2026