Depna

0 reviews

Depna is a dependency security scanner that finds known vulnerabilities without needing access to your source code. Instead of connecting to your repository, you upload a single dependency file such as package.json, requirements.txt or pom.xml and get a full report in under 2 minutes. This no repo access model fits teams working under strict security policies. The file is processed in memory then deleted right after the scan. It covers 8 ecosystems and ranks findings by severity from Critical to Low, with the CVE, the CVSS score and the exact fixed version for each one. Lock files add full transitive coverage. Every finding is explained by AI in three layers for engineers, managers and executives, and Depna generates audit ready ISO 27001 and SOC 2 Type II PDF reports that you can white label. Scan from the dashboard or add one command to your CI/CD pipeline for GitHub Actions, GitLab CI or Bitbucket. Get alerts in Slack, Teams, Discord or email when something critical lands. Built for startups and small teams, with a free plan and paid tiers that scale by projects.