About
About DevGuard
DevGuard is the open-source developer security platform for hardening the software supply chain. This is where the project came from, what it is licensed under, and who it is built for.
No Lock-In.
100% Open Source.
DevGuard is fully open source under AGPL-3.0. It aggregates open source security data and intelligence, and relies exclusively on open standards like SBOM, VEX and CSAF - making it compatible and easy to integrate into any toolchain.
OSI-Approved License
AGPL-3.0
Malicious & Vulnerable Packages Tracked
400K+
Based on Open Standards
100%
Integration Time
<10min
Our Mission
Helping FOSS Projects & Small Companies
We're on a mission to transform how software is developed and secured.
DevGuard aims to make application security easier and more accessible for developers. By integrating essential security tools such as SCA, secret scanning, and container scanning into a single CLI, DevGuard reduces the burden on developers while seamlessly fitting into existing workflows. Our goal is to help developers build secure software without the need for specialized security knowledge.
DevGuard is free for other open source projects, and we support small startups so that neither has to forgo software security for lack of resources - security should not be a privilege reserved for large enterprises. To appreciate the work of FOSS maintainers, we return a part of our revenue to the open source projects we use and rely on. Get in touch with us to learn more.
First Line of Code
DevGuard project is born out of a passion for open source and secure software development. We set out to create a tool that empowers developers to build secure applications without friction.
