Introducing Guard Dep 2.0 — Real-time SCA for Enterprise

Stop vulnerable
dependencies before they ship

Guard Dep scans every dependency across your repositories, surfaces exploitable CVEs, and blocks risky packages automatically — so your engineering teams can ship fast without exposing your attack surface.

Get StartedView Features
guarddep scan — mtn-billing-service
$ guarddep scan ./
Scanning 847 dependencies across 12 repositories...
 
✦ mtn-billing-service 3 CRITICAL 6 HIGH 4 MED
✦ mtn-auth-gateway 2 CRITICAL 4 HIGH 2 MED
✦ mtn-payment-core 4 CRITICAL 5 HIGH
✓ mtn-mobile-api CLEAN
✓ mtn-analytics-api CLEAN
 
⚑ CVE-2021-44228 (Log4Shell) CVSS 10.0 — log4j-core@2.14.1
⚑ CVE-2021-23337 CVSS 9.8 — lodash@4.17.20
 
Auto-fix available for 9 of 14 vulnerabilities.
$
Trusted by engineering teams atMTN GroupSafaricomFlutterwaveInterswitchPaystackAndela
847K+
Packages scanned daily across all customer repos
99.4%
Accuracy on CVE detection with zero false-negative SLA
<2s
Median time to vulnerability detection from commit
12+
Ecosystems supported: npm, pip, maven, Go, cargo, gem…
Core Capabilities

A new layer of security
for your dependency supply chain

Traditional CI/CD security stops at code. Guard Dep goes deeper — tracking the transitive graph of every package your engineers pull in, continuously.

Universal Discovery
Automatically inventories every direct and transitive dependency across all repositories — npm, pip, maven, Go modules, Cargo, RubyGems and more.
Real-time CVE Matching
Continuously matches your dependency graph against NVD, GitHub Advisory, and OSV databases. Alerts propagate in under 2 seconds from publication.
Automated Blocking
Define policies that automatically block builds, fail CI checks, or create PRs with upgrade paths — before vulnerable packages ever reach production.
Risk Intelligence
CVSS scoring, EPSS exploit probability, CWE classification, and reachability analysis give you the context to triage what actually matters.
Scanning

Complete dependency visibility, across every repo

Guard Dep connects to GitHub and builds a live dependency graph. See every package, every version, every risk. Updated on every push.

  • ✓Real-time inventory across 12+ ecosystems
  • ✓Transitive dependency tree with depth analysis
  • ✓License compliance tracking alongside security
  • ✓Historical trending — watch your risk posture improve
Start scanning →
mtn-billing-service / package-lock.json
3 CRITICAL6 HIGH4 MED
log4j-core2.14.1→2.17.2
lodash4.17.20→4.17.22
axios0.21.1→1.7.4
express4.17.1→4.18.3
react18.3.1
Who it's for

Built for every role in your security workflow

From security engineers who define policy to developers who ship features — Guard Dep fits naturally into every workflow.

Security Engineers
Get real-time visibility into every dependency risk across the organisation. Set policies once, enforce everywhere.
Developers
Know exactly which packages are safe to use before you push. Get safe upgrade suggestions inline in every PR.
Compliance & Auditors
Generate SBOM and vulnerability reports on demand. Full audit trail of who changed what and when.
Engineering Leaders
Track your organisation's security posture over time. Reduce mean time to remediation with automated blocking.
Pricing

Simple, transparent pricing

Start free. Pay per active developer as you grow.

MonthlyAnnual
Free
$0

For individuals and evaluation.

Start Free
  • 1 private repository
  • All 8 ecosystems scanned
  • OSV + NVD + GHSA advisories
  • Basic PR checks
  • In-product alerts
  • Basic CSV export
  • Community support
Pro
…
What's an active developer?

Developers and small teams.

Start 14-Day Trial
  • Up to 10 repositories per developer
  • All 8 ecosystems scanned
  • Blocking PR checks via GitHub
  • Custom block-list management
  • SBOM export (CycloneDX + SPDX)
  • Slack, Teams & email digest alerts
  • CSV + JSON reports
  • Email support
Most Popular
Team
…
What's an active developer?

Engineering and security teams.

Start 14-Day Trial
  • Everything in Pro
  • Unlimited repositories (fair use)
  • Custom policies + policy-as-code
  • PDF, CSV, JSON, SBOM reports
  • Audit logs
  • Priority email support
Enterprise
Contact us

Large organisations and regulated teams.

Talk to Sales
  • Everything in Team
  • Organisation-wide policy governance
  • Custom & compliance reporting
  • SSO / SAML
  • Custom integrations & SIEM
  • 24/7 priority + dedicated support

Secure your supply chain
starting today

Connect your GitHub organisation and start scanning in under 2 minutes. Free forever for one repo.

Get started freeTalk to sales →