Stop malicious open source packages reaching your developers, CI/CD pipelines, repositories and AI agents. Pay for the SDLC endpoints you protect, nothing else.
For individuals and small projects getting started.
$0 forever
up to 3 endpoints
no card, no expiry
No credit card required
Most popularOrg-wide protection from malicious third-party code, priced per endpoint.
$80 per month
billed yearly
5 endpoints × $16 / month
For orgs with scale, compliance or deployment requirements.
Custom
volume endpoint pricing
Typically replies same day
| Feature | Free | Team | Enterprise |
|---|---|---|---|
| Endpoints & protection | |||
| SDLC endpoints | Up to 3 | By subscription | Custom / volume |
| Real-time malicious package protection | Included | Included | Included |
| Dependency cooldown policy | Not included | Included | Included |
| Install sandboxing | Not included | Included | Included |
| Registry-level enforcement | Not included | Not included | Included |
| Visibility & inventory | |||
| Endpoint & package inventory | Not included | Included | Included |
| AI agents, skills & MCP server inventory | Not included | Included | Included |
| Org-wide & cross-repository visibility | Not included | Included | Included |
| Findings history & retention | 7 days | 90 days | 365 days |
| On-demand & agents | |||
| On-demand package scans included / month | Not included | 10 per endpoint | Custom |
| On-demand repository scans included / month | Not included | 25 per endpoint | Custom |
| Agent investigations included / month | Not included | Not included | Custom |
| Package scan overage | Not included | $0.50 / scan | Custom |
| Repository scan overage | Not included | Add endpoints | Custom |
| Governance & platform | |||
| Centralized policies | Not included | Included | Included |
| Audit history | Not included | 90 days | Custom |
| Reporting | Not included | Included | Included |
| Single Sign-On (SSO) | Not included | Not included | Included |
| Role based access control (RBAC) | Not included | Not included | Included |
| MDM rollout | Not included | Not included | Included |
| Enterprise integrations (SIEM, EDR) | Not included | Not included | Included |
| Support & compliance | |||
| Support | Community | Dedicated | |
| SLA | Not included | Not included | Included |
| SOC 2 & ISO 27001 reports | Not included | On request | Included |
| Data residency | Not included | Not included | Scoped in contract |
Our malicious package intelligence, delivered as data you can build on: the feed behind SafeDep's verdicts, queryable and pushed into the tools your security team already runs. Attach it to any paid plan.
Continuous stream of confirmed malicious packages, campaigns and indicators across npm, PyPI, Go, Maven and more.
Query history and evidence directly, or pull it through the developer API into your own pipelines and detections.
Push indicators into SIEM, EDR and agent guardrails so the same intel drives detection and blocking.
An SDLC endpoint is any point in your lifecycle where SafeDep is integrated. That means a developer machine, a CI environment, a repository, or an AI agent. Third-party code enters at each of these, and you pay for the ones you cover. One unit, so the bill stays predictable however you deploy.
A laptop running pmg, blocking malicious installs before they execute.
= 1 endpoint
A pipeline scanning dependencies on every build.
= 1 endpoint
A repo with continuous pull request scanning enabled.
= 1 endpoint
A coding agent whose installs and tool calls you protect and observe.
= 1 endpoint
Protection is never metered. Scanning packages, blocking malicious installs, PR scans and inventory across your endpoints are all included, however much your team ships.
On-demand scans come with a monthly allowance that grows with your endpoints. Package scans meter beyond the allowance, repository scans are tied to endpoints, and we tell you before you get there.
Your endpoint count is always a unique count, and you can control how it's grouped. If you have queries about our pricing options, you're in the right place.
No. SafeDep identifies each endpoint on a best-effort basis using a stable fingerprint, so the hundreds of throwaway VMs a hosted runner provisions resolve to one CI environment. Your endpoint count is always the unique count, and operators can override the endpoint identifier to group them exactly as you want.
The same way. Cloud-hosted and ephemeral agents are fingerprinted and de-duplicated, so a fleet that scales up and down through the day does not inflate your count. As with CI, operators can override the identifier to control how agents are grouped.
Yes. One repository is one endpoint, regardless of its size or how many services live inside it.
Your count adjusts as you add or remove endpoints, and we prorate the difference. Endpoints that stop reporting drop out, so you're billed for what you're actually protecting, not what you once registered.
No. The 30-day trial needs only basic details and no card. You enter payment only when you decide to subscribe.
You move to the Free plan automatically, so nothing is deleted and nothing breaks. You keep real-time protection on up to 3 endpoints. Org-wide features and extended history pause until you subscribe. We tell you what changes before the trial ends.
No. Protection is never metered. Verdicts, PR scans and inventory are unlimited across every endpoint you pay for. On-demand package scans come with a monthly allowance that grows with your endpoint count, and only elective scans beyond it bill as overage. On-demand repository scans are included with each endpoint, so more scanning means more endpoints, never a surprise charge. We alert you well before you approach any limit.
Permanently. vet, pmg and gryph are open source and free to use standalone with no account, no subscription and no endpoint counted. SafeDep Cloud is the commercial platform that adds centralized policy, org-wide visibility, history and support on top.
They solve different problems. Your EDR watches what processes do once they're running. SafeDep checks what your developers and agents pull in, meaning the packages, extensions and components entering your SDLC, before they ever execute. Most teams run both, and SafeDep coexists with EDR/XDR on the same machine.
That's the Enterprise plan. SSO and role-based access control, MDM rollout, registry-level enforcement, custom retention, and SIEM/EDR integrations are all available. Data residency requirements, including EU, are scoped as part of an enterprise agreement.
It's the intelligence behind SafeDep's verdicts, delivered as data: a continuous malicious package feed, a queryable data hub, API access, and indicator push into SIEM, EDR and agent guardrails. Attach it to Team or Enterprise. Protection itself doesn't need it.
As a separate monthly line on the same invoice as your plan, added or removed at any time with proration. It is included for the length of your 30-day trial so you can evaluate the feed before committing.
Any time, in-product. Upgrades apply immediately and we prorate the difference; downgrades take effect at the end of your current cycle, with nothing deleted in between.
All major credit and debit cards for self-serve subscriptions. Enterprise agreements can be invoiced annually by bank transfer, with purchase order and procurement paperwork supported.
Start a 30-day trial with no credit card. Stay on Free when it ends, or scale to org-wide protection.
