Skip to main content
You do not need all of SafeDep on day one. Start with one free tool that solves your problem today. Add SafeDep Cloud when your team needs shared visibility and control. This page shows you where to start.

​
Start free

Pick the task you want to do today. Everything in this list is free. Most items are open source tools; the cards say when an item is a cloud service instead.

Stop a malicious npm or pip install

PMG wraps your package manager and blocks known malicious packages before their code runs. Open source, no account.

Scan a repository before you merge

Vet scans your dependencies for malicious packages, vulnerabilities, and policy violations, locally or in CI. Open source, no account.

Check one dependency against the malware database

Query SafeDep’s known malicious packages database for a specific package through Vet. A free cloud service, no account needed.

Secure your AI coding agent

Audit what agents read, write, and run, and discover AI tooling, with open source tools. The SafeDep MCP server adds package vetting for agents; it is a cloud service and needs a SafeDep Cloud account.

Generate an SBOM

xBom builds a bill of materials that also detects AI libraries and SaaS usage in your code. Open source, no account.

Make your AI agent SafeDep-fluent

Install the SafeDep skill so your coding agent answers and acts from these docs. Open source, no account.

​
Add SafeDep Cloud when the need is team-wide

Move to SafeDep Cloud when you need to protect more than one developer, apply one policy across your organization, or answer questions from one place: which machines run PMG, what was blocked last week, which projects have critical vulnerabilities. SafeDep Cloud connects the same tools to a tenant that you can see and query.
SafeDep Cloud is the hosted control plane. The open source tools keep working without it, and nothing above stops working when you add it.

Cloud Quickstart

Create a tenant, sign in the safedep CLI, connect a source, and run your first query.

Connect your sources

Feed GitHub, CI/CD, PMG, and MCP activity into one tenant.

Endpoint Hub

See package activity and AI tooling across developer machines, CI runners, and agent sandboxes.

Talk to SafeDep

Ask your tenant questions in plain English through your AI coding agent.