DevGuard

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

DevGuard is ranked #5 of 23 in software supply chain security software on Inferse. It runs on API, Linux, macOS, Self-hosted, Web, Windows. There is a free plan. A free trial is offered. Paid plans start at €449.10/mo.

Compared on software supply chain security software

Free plan: Yesdevguard.org
Source & repo security: Yesdevguard.org
Dependency analysis: Yesdevguard.org
SBOM management: Yesdevguard.org
Build provenance: Yesdevguard.org
Artifact signing: Yesdevguard.org
Provenance attestations: Yesdevguard.org
Release policy gates: Yesdevguard.org

Facts

Purpose: DevGuard is an open-source developer security platform for hardening the software supply chain.devguard.org · 30 Sept 2026
Vulnerability management: It monitors deployed software for newly disclosed vulnerabilities and can automatically create issues when new CVEs affect software.devguard.org · 30 Sept 2026
Risk and VEX: It prioritizes risk using scoring and exploit probability analysis, and supports VEX assessment sharing to reduce false positives.devguard.org · 30 Sept 2026
Integrations: The homepage says DevGuard connects with GitLab and GitHub repositories, CI pipelines, and issue trackers.devguard.org · 30 Sept 2026
Open standards: DevGuard can ingest inputs from scanners or tools that support SBOM, VEX, and SARIF.devguard.org · 30 Sept 2026
CLI: The devguard-scanner CLI supports software composition analysis, static application security testing, and signing attestations.devguard.org · 30 Sept 2026
Dependency firewall: The dependency firewall checks npm, Go, PyPI, and container image requests against a malicious package database and blocks known-bad releases.devguard.org · 30 Sept 2026
Supported users: The documentation describes DevGuard as built for developers, DevOps engineers, and security-conscious teams.docs.devguard.org · 30 Sept 2026
Security and compliance: The documentation says DevGuard helps meet software development requirements for standards such as ISO/IEC 27001 and PCI-DSS.docs.devguard.org · 30 Sept 2026
Support: The open-source plan includes community support; Business SaaS includes monthly support hours and 8×5 email support.devguard.org · 30 Sept 2026
Notable plan limit: The free Open Source plan is for public projects with an OSI-approved license; non-commercial FLOSS projects can get SaaS free.devguard.org · 30 Sept 2026
License: The project documentation says DevGuard source code is distributed under AGPL-3.0-or-later.docs.devguard.org · 30 Sept 2026
Maker: The site footer identifies L3montree GmbH and the DevGuard Contributors; the project timeline lists its first line of code in June 2023.devguard.org · 30 Sept 2026