> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safedep.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Choose Your Path

> Start free with the open source tool that fits your use case. Add SafeDep Cloud when your team needs one view.

You do not need all of SafeDep on day one. Start with one free tool that solves your problem today. Add SafeDep Cloud when your team needs shared visibility and control. This page shows you where to start.

## Start free

Pick the task you want to do today. Everything in this list is free. Most items are open source tools; the cards say when an item is a cloud service instead.

<CardGroup cols={2}>
  <Card title="Stop a malicious npm or pip install" icon="shield-halved" href="/package-security/pmg/quickstart">
    PMG wraps your package manager and blocks known malicious packages before their code runs. Open source, no account.
  </Card>

  <Card title="Scan a repository before you merge" icon="magnifying-glass" href="/governance/vet/quickstart">
    Vet scans your dependencies for malicious packages, vulnerabilities, and policy violations, locally or in CI. Open source, no account.
  </Card>

  <Card title="Check one dependency against the malware database" icon="box-open" href="/governance/cloud/malware-analysis">
    Query SafeDep's known malicious packages database for a specific package through Vet. A free cloud service, no account needed.
  </Card>

  <Card title="Secure your AI coding agent" icon="robot" href="/ai-security/overview">
    Audit what agents read, write, and run, and discover AI tooling, with open source tools. The SafeDep MCP server adds package vetting for agents; it is a cloud service and needs a SafeDep Cloud account.
  </Card>

  <Card title="Generate an SBOM" icon="boxes-stacked" href="/governance/xbom/quickstart">
    xBom builds a bill of materials that also detects AI libraries and SaaS usage in your code. Open source, no account.
  </Card>

  <Card title="Make your AI agent SafeDep-fluent" icon="puzzle-piece" href="/get-started/safedep-skill">
    Install the SafeDep skill so your coding agent answers and acts from these docs. Open source, no account.
  </Card>
</CardGroup>

## Add SafeDep Cloud when the need is team-wide

Move to SafeDep Cloud when you need to protect more than one developer, apply one policy across your organization, or answer questions from one place: which machines run PMG, what was blocked last week, which projects have critical vulnerabilities. SafeDep Cloud connects the same tools to a tenant that you can see and query.

<Note>
  SafeDep Cloud is the hosted control plane. The open source tools keep working without it, and nothing above stops working when you add it.
</Note>

<CardGroup cols={2}>
  <Card title="Cloud Quickstart" icon="rocket" href="/governance/cloud/quickstart">
    Create a tenant, sign in the safedep CLI, connect a source, and run your first query.
  </Card>

  <Card title="Connect your sources" icon="plug" href="/governance/cloud/sync">
    Feed GitHub, CI/CD, PMG, and MCP activity into one tenant.
  </Card>

  <Card title="Endpoint Hub" icon="server" href="/governance/cloud/endpoint-hub/overview">
    See package activity and AI tooling across developer machines, CI runners, and agent sandboxes.
  </Card>

  <Card title="Talk to SafeDep" icon="comments" href="/governance/cloud/talk-to-safedep">
    Ask your tenant questions in plain English through your AI coding agent.
  </Card>
</CardGroup>