Dependency Security · compliance · Updated June 2026
SOC 2-certified Dependency Security
5 of the 6 dependency security tools we track publish a SOC 2 attestation, from $20/mo. Here's the verified list — every name links to its sourced pricing record and the date we captured it.
The verified list
- SOC 2-certified: FOSSA, Snyk, Socket, Endor Labs, and Mend (formerly WhiteSource).
- Cheapest: FOSSA from $20/mo.
- Coverage: 5 of 6 tracked dependency security tools.
As of · compliance status is re-verified with each catalog refresh
SOC 2-certified dependency security — pricing & other attestations
| Tool | Entry price | Also certified | Verified |
|---|---|---|---|
| FOSSA | $20/mo | — | 2026-06-18 |
| Snyk | $25/mo | GDPR | 2026-06-18 |
| Socket | $25/mo | — | 2026-06-18 |
| Endor Labs | Quote-only | — | 2026-06-18 |
| Mend (formerly WhiteSource) | Quote-only | GDPR | 2026-06-18 |
Compliance and pricing re-verified with each catalog refresh. Last catalog update 2026-06-18.
Frequently asked questions
Which dependency security tools are SOC 2-certified?
FOSSA, Snyk, Socket, Endor Labs, and Mend (formerly WhiteSource) carry a SOC 2 attestation as of 2026-06-18.
What is the cheapest SOC 2-certified dependency security?
FOSSA, from $20/mo. Verified 2026-06-18.