Monitor your dependencies for new vulnerabilities daily
Track all npm packages across your projects. Get instant alerts the moment a vulnerability is discovered and receive safe upgrade paths — before attackers exploit them.
Start Monitoring — $12/moCancel anytime. No credit card required to start.
Daily Scans
Automated scans against the latest CVE databases every 24 hours.
Instant Alerts
Email notifications the moment a new vulnerability affects your stack.
Safe Upgrades
Pinpointed upgrade paths that fix issues without breaking your app.
Simple Pricing
- ✓ Unlimited projects
- ✓ Daily vulnerability scans
- ✓ Instant email alerts
- ✓ Safe upgrade suggestions
- ✓ GitHub integration
- ✓ Priority support
FAQ
How does the vulnerability scanning work?
We parse your package.json files and cross-reference every dependency against the GitHub Advisory Database and the npm audit API daily. Any new CVE that matches your packages triggers an immediate alert.
Do you need access to my source code?
No. We only need read access to your package.json and package-lock.json files via GitHub OAuth. Your source code is never read or stored.
What happens when a vulnerability is found?
You receive an email with the CVE details, affected package version, severity score, and a recommended upgrade path. Critical vulnerabilities also trigger a Slack or webhook notification if configured.