# DevGuard

> DevGuard is an open-source developer security platform for hardening software supply chains, built by L3montree GmbH in Germany.

DevGuard combines continuous vulnerability scanning, VEX-based assessment sharing, a dependency firewall, and reproducible-build verification into a single platform. It is built on open standards (SBOM, VEX, SARIF), licensed under AGPL-3.0, and is an OWASP Foundation Incubator Project.

## Product
- [Homepage](https://devguard.org/): overview of DevGuard's developer security platform
- [Pricing](https://devguard.org/#pricing): Open Source, Business SaaS, and Enterprise plans
- [Tool Comparison](https://devguard.org/tool-comparison): how DevGuard compares to other AppSec tools
- [CRA Compliance](https://devguard.org/cra_compliance): how DevGuard supports EU Cyber Resilience Act compliance
- [Reproducible Builds](https://devguard.org/reproducible-builds): verifiable, bit-for-bit reproducible container images

## Resources
- [Blog](https://devguard.org/blog): engineering deep-dives, research notes, and announcements
- [Research & Development](https://devguard.org/research-development): publications and whitepapers
- [Ecosystem Projects](https://devguard.org/ecosystem-projects): open-source integrations and tooling

## Documentation
- [Docs](https://docs.devguard.org/): getting started, core concepts, how-to guides, and reference

## Source
- [GitHub](https://github.com/l3montree-dev/devguard)
- [GitLab](https://gitlab.com/l3montree/devguard)