Dependency Security · pricing · Updated September 2026
Endor Labs pricing (2026)
Endor Labs starts at $0/mo (Developer (Free)) as checked on 2026-09-02, read from Endor Labs's own pricing page; 3 plans. Best for reachability-based triage. Every figure below links to its source and the date we captured it.
At a glance
- Entry price: $0/mo (Developer (Free))
- Free tier: Yes
- Compliance: HIPAA — · SOC 2 Yes · GDPR —
- Best for: reachability-based triage; SBOM and VEX workflows; AI supply chain governance; cloud-native teams on AWS/Azure/GCP
As of · every figure below links to its source
Endor Labs plans & pricing
| Plan | Monthly | Annual | Billing | Notes | Source |
|---|---|---|---|---|---|
| Developer (Free) | $0 | — | flat | Permanently free, no account required. Local scanning only, read-only vulnerability data access. No UI, no policies, no scan history. For individual developer evaluation. | endorlabs.com |
| Core | not priced monthly | — | per_seat | Pricing not published; contact sales. Team deployments with reachability analysis, vulnerability prioritization, and policies. Seat-based pricing with volume discounts as contributor count grows. | endorlabs.com |
| Pro | not priced monthly | — | per_seat | Pricing not published; contact sales. Built for scale with advanced features for detecting, triaging, and fixing vulnerabilities. Includes SBOM Hub, Package Firewall, Agent Governance, and Patches. | endorlabs.com |
Last verified 2026-09-02. Pricing re-verified at endorlabs.com/pricing on 2026-06-18. Developer (Free) $0; Core and Pro are quote-only (no published price), so monthlyUsd null. SOC 2 Type II confirmed via Endor Labs blog; page also lists FedRAMP, ISO 42001, PCI DSS, CRA. Re-verified 2026-09-02 against the live pricing page; published figures unchanged.
Price changes
No change record has cleared two sources yet, so nothing is published on the wire.
Capabilities
Integrations: GitHub, GitLab, Bitbucket, Azure DevOps, Jenkins, Jira, Slack, AWS Marketplace, Azure Marketplace, Google Cloud Marketplace.
Key features: Function-level reachability analysis for accurate vulnerability prioritization; SBOM Hub for generating and managing SBOMs and VEX documents; Package Firewall to block malicious or unapproved dependencies at install time; AI agent governance to discover and control AI components in the supply chain.
Plan limits: Free: local scanning only, no UI or scan history, no account required; Core/Pro: seat-based with fair-usage annual quotas (not hard-enforced); Scan credits available for purchase for scan-intensive workflows.
Frequently asked questions
How much does Endor Labs cost?
Endor Labs starts at $0/mo (Developer (Free)); it has 3 published plans. Verified 2026-09-02.
Does Endor Labs support HIPAA?
Endor Labs HIPAA support: —. SOC 2: Yes. GDPR: —.
Does Endor Labs have a free plan?
Endor Labs free tier: Yes.
Endor Labs vs alternatives
Compare all dependency security · Endor Labs alternatives · SOC 2-certified dependency security · Open data · MCP
More dependency security tools
Related categories
Display this standing
Endor Labs currently holds a gold deskmark here — Rank 2 of 6 · Dependency Security. Anyone may show it. There is nothing to apply for, nothing to pay, and displaying it changes no score: the standing comes from the published algorithm and money never touches it.
The image is drawn from our live data, so it follows the standing rather than freezing it: if Endor Labs moves up or down a tier, the plaque on your own site says so at our next publish. Nothing is tracked beyond the ordinary web-server log that records any image request.