Stop AI/ML Supply Chain Attacks Before They Hit
DepsGuard monitors your PyPI and npm packages in real-time, alerting you within minutes when a dependency gets compromised.
Everything you need to secure your dependencies
From real-time monitoring to bulk scanning, DepsGuard covers your AI/ML supply chain.
Real-time Watchlist
Monitor your critical packages 24/7. Get notified within minutes when a vulnerability is published.
Multi-format Scanning
Scan requirements.txt, poetry.lock, package.json, and uv.lock files in one click.
Multi-source Advisories
GHSA + OSV.dev aggregated and deduplicated. One clean view per vulnerability.
Desktop Notifications
Instant Chrome alerts when a watched package is compromised. No tab required.
PyPI + npm Support
Full coverage of Python and JavaScript AI/ML package ecosystems plus Hugging Face.
Zero Setup
Free tier runs entirely in your browser. Install the extension and start monitoring immediately.
Simple, transparent pricing
Start free. Upgrade when you need more power.
Free
- 5 watched packages
- Manual scan
- Chrome notifications
- PyPI + npm support
- GHSA + OSV advisories
Pro
- Unlimited watched packages
- Slack, Discord & email alerts
- Conda support
- Transitive dependency scanning
- Risk scores & trust analysis
- Priority advisory feed
Team
- Everything in Pro
- Shared team watchlists
- Org-wide scanning
- SBOM export
- SSO integration
- Policy-as-code rules