depproof vs KeyEnv

A side-by-side comparison built from both listings. Blank cells mean the company has not given that detail; we never guess.

depproof compared with KeyEnv
Detail	depproof	KeyEnv
What it does	Self-hosted application security and software composition analysis for open-source dependencies	Secure secrets management for teams with encrypted environment variables and audit logs
Stage	Not given	Not given
Founded	Not given	Not given
Based in	Not given	Not given
Pricing model	Freemium	Freemium
Pricing	Scanner: Free for open source and organizations under $1M revenue; includes every repository, full transitive resolution for Java, JavaScript, Python, Go, license audit, OSV advisories with CI gate, HTML report and CycloneDX SBOM. Over $1M revenue, the Scanner license adds priority support and polic	Free: up to 3 projects, 100 secrets per environment, CLI access. Team: $4 per user per month (or $3.33 per user per month with annual billing, $40 per user per year, saving 17%). Enterprise: custom pricing with SSO/SAML, custom integrations, SLA and dedicated support, on-premise option.
Key features	Full transitive dependency tree resolution for Java, JavaScript, Python, and Go License classification and audit with allowed, review, and forbidden categories OSV advisory screening for vulnerability detection CycloneDX SBOM generation on every scan CI gate with configurable fail-on levels Dev and test dependency detection and flagging Runs as GitHub Action or self-hosted container Waivers with append-only audit trail for Hub Coverage reporting showing how much of dependency tree was resolved	AES-256-GCM encryption at rest Run without .env file on disk Role-based access per environment Service tokens for CI/CD Database credential rotation for PostgreSQL and MySQL Secret scanning for hardcoded keys SDKs for 8 languages and CI/CD platforms Environment inheritance and overrides Complete audit logs of all secret access AI agent integration for Claude, Cursor, Codex
What makes it different	Uses open OSV advisory data instead of proprietary vulnerability database Maven resolution directly from source with no build or lockfile needed Single container with no standing service or platform team required to operate Priced per product with all developers and repositories included, not per seat or per committer	Move secrets from .env files to encrypted storage in three commands Nothing left on disk to leak with keyenv run Zero-knowledge encryption KeyEnv employees cannot access secrets Works offline with cached encrypted secrets Affordable per-seat pricing compared to competitors
Free plan	Not given	Not given
Open source	Not given	Not given
Platforms	Not given	Not given
Public API	Not given	Not given
Community votes	0	0
DR (Domain Rating by Ahrefs)	14 no change since last check	8 no change since last check
Trust Flow (Majestic)	5	4
Citation Flow (Majestic)	24	29
Referring domains (Majestic)	24	33

5 details filled in for both companies.

More alternatives to depproof More alternatives to KeyEnv