Dependency Security · compliance claims
Dependency Security vendors that state SOC 2 compliance
5 of the 6 dependency security tools we track state SOC 2 compliance, from $20/mo. These are claims as we read them on the pages listed below, each on the vendor's own site; we have not audited them. Every name links to its pricing record.
At a glance
- States SOC 2 compliance: FOSSA, Snyk, Socket, Endor Labs, and Mend (formerly WhiteSource).
- Cheapest: FOSSA from $20/mo (price read 2026-09-02).
- Coverage: 5 of 6 tracked dependency security tools.
Claims read on 2026-06-18 · not audited by us
Dependency Security: SOC 2 claims, pricing and other claims
| Tool | Entry price | Also states | Claim read | Read on |
|---|---|---|---|---|
| FOSSA | $20/mo read 2026-09-02 | — | 2026-06-18 | fossa.com |
| Snyk | $25/user/mo read 2026-09-02 | GDPR | 2026-06-18 | snyk.io |
| Socket | $25/user/mo read 2026-11-01 | — | 2026-06-18 | socket.dev |
| Endor Labs | free plan only | — | 2026-06-18 | endorlabs.com |
| Mend (formerly WhiteSource) | not priced monthly | GDPR | 2026-06-18 | mend.io |
Each entry price shows the day we last read it. "Claim read" is the day we last read the claim on that page. We have not audited any vendor, and a claim can change between reads.
Frequently asked questions
Which dependency security tools state SOC 2 compliance?
FOSSA, Snyk, Socket, Endor Labs, and Mend (formerly WhiteSource) state SOC 2 compliance, as we read their pages on 2026-06-18. We report the claims as read and have not audited them.
What is the cheapest dependency security that states SOC 2 compliance?
FOSSA, from $20/mo (price read 2026-09-02). We read its SOC 2 claim on 2026-06-18, and we have not audited it.