Secureframe vs depproof

A side-by-side comparison built from both listings. Blank cells mean the company has not given that detail; we never guess.

Secureframe compared with depproof
Detail	Secureframe	depproof
What it does	Build trust. Unlock growth.	Self-hosted application security and software composition analysis for open-source dependencies
Stage	Not given	Not given
Founded	2020	Not given
Based in	US	Not given
Pricing model	Paid	Freemium
Pricing	Fundamentals tier starting at $7,500/year with basic compliance features. Complete tier offers advanced features. Defense tier includes CMMC-specific capabilities. Pricing is quote-based for higher tiers.	Scanner: Free for open source and organizations under $1M revenue; includes every repository, full transitive resolution for Java, JavaScript, Python, Go, license audit, OSV advisories with CI gate, HTML report and CycloneDX SBOM. Over $1M revenue, the Scanner license adds priority support and polic
Key features	Automated evidence collection Continuous monitoring AI-powered remediation guidance Risk management and assessment Questionnaire automation Trust Center for security posture showcase Vendor and third-party risk management Personnel access management Asset inventory and scoping	Full transitive dependency tree resolution for Java, JavaScript, Python, and Go License classification and audit with allowed, review, and forbidden categories OSV advisory screening for vulnerability detection CycloneDX SBOM generation on every scan CI gate with configurable fail-on levels Dev and test dependency detection and flagging Runs as GitHub Action or self-hosted container Waivers with append-only audit trail for Hub Coverage reporting showing how much of dependency tree was resolved
What makes it different	AI-powered automation for compliance tasks to save time and resources More than 30 in-house compliance experts and former auditors providing guidance Trusted by 6000+ customers across all company sizes Purpose-built platform for defense contractors with CMMC capabilities	Uses open OSV advisory data instead of proprietary vulnerability database Maven resolution directly from source with no build or lockfile needed Single container with no standing service or platform team required to operate Priced per product with all developers and repositories included, not per seat or per committer
Free plan	Not given	Not given
Open source	Not given	Not given
Platforms	Not given	Not given
Public API	Not given	Not given
Community votes	0	0
DR (Domain Rating by Ahrefs)	80 no change since last check	14 no change since last check
Trust Flow (Majestic)	40	5
Citation Flow (Majestic)	54	24
Referring domains (Majestic)	7988	24

5 details filled in for both companies.

More alternatives to Secureframe More alternatives to depproof