depproof vs Vigilance

A side-by-side comparison built from both listings. Blank cells mean the company has not given that detail; we never guess.

depproof compared with Vigilance
Detail	depproof	Vigilance
What it does	Self-hosted application security and software composition analysis for open-source dependencies	Security for the apps your staff build with AI
Stage	Not given	Startup
Founded	Not given	2026
Based in	Not given	CA
Pricing model	Freemium	Free trial
Pricing	Scanner: Free for open source and organizations under $1M revenue; includes every repository, full transitive resolution for Java, JavaScript, Python, Go, license audit, OSV advisories with CI gate, HTML report and CycloneDX SBOM. Over $1M revenue, the Scanner license adds priority support and polic	Solo: Free for one person on one computer. Team: $49 per computer per month, or $490 per computer per year with 2 months free. Managed: $199 per computer per month, or $1,990 per computer per year with 2 months free, plus $2,500 one-time setup per company.
Key features	Full transitive dependency tree resolution for Java, JavaScript, Python, and Go License classification and audit with allowed, review, and forbidden categories OSV advisory screening for vulnerability detection CycloneDX SBOM generation on every scan CI gate with configurable fail-on levels Dev and test dependency detection and flagging Runs as GitHub Action or self-hosted container Waivers with append-only audit trail for Hub Coverage reporting showing how much of dependency tree was resolved	Checks packages AI tools and staff download on computers Detects when updates gain harmful new capabilities Automatically reverts to last safe version on paid plans Works with Claude Code, Cursor, Codex, Copilot, Devin Desktop and Gemini CLI Monthly reports on downloads per computer Alerts if Vigilance stops running on a computer for 3 days Security expert review before showing warnings on Managed plan Scans all apps on computer for Managed plan Written security report after setup on Managed plan
What makes it different	Uses open OSV advisory data instead of proprietary vulnerability database Maven resolution directly from source with no build or lockfile needed Single container with no standing service or platform team required to operate Priced per product with all developers and repositories included, not per seat or per committer	Catches zero-day supply chain attacks faster than security databases Analyzes file capabilities instead of relying on reputation or signatures Stays quiet by default, only alerts on meaningful changes Does not access code, files or team activity data
Free plan	Not given	Not given
Open source	Not given	Not given
Platforms	Not given	Not given
Public API	Not given	Not given
Community votes	0	0
DR (Domain Rating by Ahrefs)	14 no change since last check	5 no change since last check
Trust Flow (Majestic)	5	6
Citation Flow (Majestic)	24	26
Referring domains (Majestic)	24	26

5 details filled in for both companies.

More alternatives to depproof More alternatives to Vigilance