Dependency Security · compliance · Updated September 2026
SOC 2-certified Dependency Security
5 of the 6 dependency security tools we track publish a SOC 2 attestation, from $20/mo. Here's the verified list — every name links to its sourced pricing record and the date we captured it.
The verified list
- SOC 2-certified: FOSSA, Snyk, Socket, Endor Labs, and Mend (formerly WhiteSource).
- Cheapest: FOSSA from $20/mo.
- Coverage: 5 of 6 tracked dependency security tools.
As of · compliance status is re-verified with each catalog refresh
SOC 2-certified dependency security — pricing & other attestations
| Tool | Entry price | Also certified | Verified |
|---|---|---|---|
| FOSSA | $20/mo | — | 2026-09-02 |
| Snyk | $25/mo | GDPR | 2026-09-02 |
| Socket | $25/mo | — | 2026-09-02 |
| Endor Labs | free plan only | — | 2026-09-02 |
| Mend (formerly WhiteSource) | not priced monthly | GDPR | 2026-09-02 |
Compliance and pricing re-verified with each catalog refresh. Last catalog update 2026-09-02.
Frequently asked questions
Which dependency security tools are SOC 2-certified?
FOSSA, Snyk, Socket, Endor Labs, and Mend (formerly WhiteSource) carry a SOC 2 attestation as of 2026-09-02.
What is the cheapest SOC 2-certified dependency security?
FOSSA, from $20/mo. Verified 2026-09-02.