Program application
Open Source
Maintainers of public, OSS-licensed repositories. Free scanning for public projects, generous limits, a security badge and published SBOM for your repo.
Every program starts with this form. Approval is quick once verified. Read more about the program.
What is included
- Scanning for your public repositories, with generous limits
- Dependency analysis, and an SBOM in CycloneDX or SPDX
- Reachability-based prioritization, so you fix what is actually exploitable
- A security badge for your README and a published SBOM for the repo
- Autonomous fix PRs are limited on this program
Who qualifies
- Public, OSS-licensed repositories only. Private repositories need a paid plan
- We re-check periodically that the repository is still public and maintained
- Not for commercial closed-source work
Renewal and what comes next
Runs for as long as the repository stays public and maintained, re-checked periodically. Private repositories move to a paid plan, and you keep your history.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.