Skip to content
CyberMax

Store › Creator & AI apps › Depmoor

DepmoorLockfile scanner ranked by real exploits (CISA KEV + EPSS) · by CyberMax

Know which vulnerable dependency to fix first

Depmoor Pro: unlimited lockfile scans (npm, yarn, pnpm, pip, Poetry, uv, Cargo, Go, Composer, Bundler, Gradle, NuGet) ranked by CISA KEV and EPSS, CSV/SARIF/Markdown/JSON exports, saved projects with new-since-last-scan, and a CI API with 100 scans a day.

Checkout by StripeCancel any timeInstant delivery14-day refund
from $9/monthSee plans & buy

Who it's for

  • indie developers
  • small agencies
  • freelance developers
  • small SaaS teams
Depmoor: Know which vulnerable dependency to fix first

Real sample output

PackageCVEWhyFixed in
log4j-core 2.14.1CVE-2021-44228KEV · ransomware · EPSS >99.9%2.15.0
log4j-core 2.14.1CVE-2021-45046KEV · EPSS >99.9%2.16.0
spring-beans 5.3.17CVE-2022-22965KEV · EPSS 99.6%5.3.18
spring-webmvc 5.3.17CVE-2022-22965KEV · EPSS 99.6%5.3.18
log4j-core 2.14.1CVE-2021-45105EPSS >99.9% (not in KEV)2.17.0

a real Depmoor scan of the built-in Java sample (gradle.lockfile, 7 packages: 40 findings, 9 fix now, 4 in CISA KEV), OSV.dev + CISA KEV 2026.09.30 + FIRST EPSS 2026-09-29 (1 Oct 2026)

Why buyers pick Depmoor

1Ranked by what attackers use: CISA's exploited-in-the-wild list (KEV) and EPSS exploit odds, not just severity.
2One upgrade per package, plus a same-major option when there is one.
3CSV, SARIF and a CI API that fails the build only on fix-now findings.
4Pro $9/month · Team $29/month

How it works

  1. Drop a lockfile (or paste it): it is read in your browser.
  2. See every vulnerable package ranked fix now, fix soon or plan, with the fixing version.
  3. Pro: export CSV/SARIF, track new findings, and gate CI with the API key shown right after payment.

Plans & pricing

14-day money-back promise: if it doesn't work as described, email us within 14 days and we fix it or refund you in full. Refund terms.

Depmoor Pro: dependency vulnerabilities ranked by real exploits, monthly

$9/month

Depmoor Pro: unlimited lockfile scans (npm, yarn, pnpm, pip, Poetry, uv, Cargo, Go, Composer, Bundler, Gradle, NuGet) ranked by CISA KEV and EPSS, CSV/SARIF/Markdown/JSON…

Buy now

Depmoor Team: CI dependency risk gate for every pipeline, monthly

$29/month

Depmoor Team: everything in Pro plus a CI API with 2,000 scans a day for the whole team's pipelines (fail builds only on fix-now findings: CISA KEV or high EPSS), SARIF for…

Buy now
Best value

Depmoor Pro yearly: dependency risk scans, 2 months free

$90/year

Depmoor Pro for a year: unlimited lockfile scans ranked by CISA KEV and EPSS, exports (CSV, SARIF, Markdown, JSON), saved projects and a CI API with 100 scans a day.

Buy now

What you get

Depmoor Pro: unlimited lockfile scans (npm, yarn, pnpm, pip, Poetry, uv, Cargo, Go, Composer, Bundler, Gradle, NuGet) ranked by CISA KEV and EPSS, CSV/SARIF/Markdown/JSON exports, saved projects with new-since-last-scan, and a CI API with 100 scans a day. Your licence key appears the moment checkout finishes. Cancel any time at depmoor.cybermax-tools.workers.dev/manage.

Refund policy

14-day money-back promise. If it doesn't work as described, email us within 14 days and we fix it or refund you in full. Duplicate charges are always refunded. Read the full policy.

Compare

Questions

How do I get it after paying?

Checkout is handled by Stripe. Your download, licence key or API key and your receipt arrive by email right after payment.

Can I get a refund?

Yes. If it doesn't work as described, email us within 14 days and we fix it or refund you in full. See the refund policy.

Is checkout secure?

Card details go only to Stripe. CyberMax never sees them; sales tax or VAT is calculated at checkout.

Can I cancel?

Any time, from the link in your receipt email. You keep access until the end of the paid period.

Scan a lockfile free

Depmoor · from $9/month

Buy now

Related products

Bonafido API · APIs & MCP

Is this website a real, legit business?

Is this company website real? One call checks a domain, URL or email: DNS, domain age, mail setup, the live homepage, parked or for-sale…

Checkout by Stripe Free tier Subscription

Prices and plans generated from live Stripe data on 01 Oct 2026.

from $9/monthSee plans & buy