Pricing
Cover every repository. Pay for the depproof products you add.
Every developer and every repository is included, so coverage is never what gets cut to fit a budget. Start with the Scanner, and add the Hub when you need one answer across all of them.
Products
Start here
Scanner
Free open source & organizations under $1M revenue
Every repository checked in CI — licenses, advisories and an SBOM on every run.
- Full transitive resolution — Java, JavaScript, Python & Go
- License audit — allowed / review / forbidden
- OSV advisories and a pass/fail CI gate
- Self-contained HTML report + CycloneDX SBOM
- GitHub Action or self-hosted container, in whichever CI you use
Over $1M revenue, the Scanner license adds
- Priority support & upgrade guidance
- Policy templates for common compliance regimes
Hub
Custom added to the Scanner
One answer across every repository, self-hosted in your own network.
- Org-wide dashboard & cross-repo blast radius
- Org-wide license posture & a current SBOM for any product
- Waivers with an append-only audit trail
- SSO / OIDC, deployable in restricted networks
- SLA & onboarding support
- SBOM retention (in development)
The Hub brings the Scanner’s reports together, so it is always added to the Scanner rather than bought on its own. Pricing is directional while we finalize terms — see the FAQ, or tell us about your estate at hello@depproof.com and we’ll be straight with you about fit.