# Endor Labs pricing (2026): plans, cost, and compliance

**Entry price:** $0 (free)/mo (Developer (Free)). Among the 5 dependency security we track it is the cheapest; median entry $0/mo.
**Domain:** endorlabs.com
**Free tier:** Yes
**Compliance:** HIPAA Not published · SOC 2 Yes · GDPR Not published
**Integrations:** GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, Jira, Slack, AWS Marketplace, Azure Marketplace, Google Cloud Marketplace
**Best for:** reachability-based triage; SBOM and VEX workflows; AI supply chain governance; cloud-native teams on AWS/Azure/GCP

## Plans

| Plan | Monthly | Annual | Billing | Notes | Source |
| --- | --- | --- | --- | --- | --- |
| Developer (Free) | $0 | — | flat | Permanently free, no account required. Local scanning only, read-only vulnerability data access. No UI, no policies, no scan history. For individual developer evaluation. | endorlabs.com |
| Core | Quote-only | — | per_seat | Pricing not published; contact sales. Team deployments with reachability analysis, vulnerability prioritization, and policies. Seat-based pricing with volume discounts as contributor count grows. | endorlabs.com |
| Pro | Quote-only | — | per_seat | Pricing not published; contact sales. Built for scale with advanced features for detecting, triaging, and fixing vulnerabilities. Includes SBOM Hub, Package Firewall, Agent Governance, and Patches. | endorlabs.com |

**Key features:** Function-level reachability analysis for accurate vulnerability prioritization; SBOM Hub for generating and managing SBOMs and VEX documents; Package Firewall to block malicious or unapproved dependencies at install time; AI agent governance to discover and control AI components in the supply chain.

**Plan limits:** Free: local scanning only, no UI or scan history, no account required; Core/Pro: seat-based with fair-usage annual quotas (not hard-enforced); Scan credits available for purchase for scan-intensive workflows.

Sources: 1 · Last verified 2026-06-18
Provenance: Pricing re-verified at endorlabs.com/pricing on 2026-06-18. Developer (Free) $0; Core and Pro are quote-only (no published price), so monthlyUsd null. SOC 2 Type II confirmed via Endor Labs blog; page also lists FedRAMP, ISO 42001, PCI DSS, CRA.
Canonical: https://frontdeskreview.com/software/dependency-security/endor-labs/
Cite: Per The Front Desk Review, Endor Labs's entry plan was $0 (free)/mo as of 2026-06-18 — https://frontdeskreview.com/software/dependency-security/endor-labs/
License: CC BY 4.0. Price history: https://frontdeskreview.com/data/price-history.jsonl