DepScope Pricing 2026

DepScope is a free ai security & testing tool that offers 8 key features including Hallucination guard verifies packages against live registries in 19 ecosystems, Typosquat detection by Levenshtein distance to popular package names, Live CVE intel from OSV, CISA KEV, EPSS, and the OpenSSF malicious feed. DepScope is a free MCP server that screens every package an AI agent suggests before it reaches npm install. It targets three specific failure modes. The first is hallucination: LLMs invent plausible-sounding package names, and DepScope verifies each one against live registries across 19 ecosystems and flags typosquats by Levenshtein distance to popular packages — the exact mechanism attackers rely on when they register a name a model is likely to hallucinate. The second is vulnerability exposure, covered by live lookups against OSV, CISA's Known Exploited Vulnerabilities list, EPSS scores, the OpenSSF malicious-package feed, and a deprecated-package index, returning severity, fix version, and migration path in one call. The third is token cost: pre-curated briefs of roughly 300 tokens replace the four-to-eight thousand tokens an agent would otherwise burn scraping registry and CVE pages per decision, a reported 74% reduction. It covers 8.5 million packages across 19 ecosystems — npm, PyPI, Cargo, Go, Composer, Maven, NuGet, RubyGems, pub, hex, Swift, CPAN, Hackage, CRAN, conda, Homebrew, JSR, and Julia — with 22 MCP tools, no auth, no API key, and no rate limit. Remote MCP works out of the box in Claude Desktop, Cursor, and Windsurf, with a curl one-liner for everything else, and the SDKs are open source. There is also a browser paste-a-manifest scan and a published ten-model hallucination benchmark.

✅ DepScope is a good choice if you need:

• •Hallucination guard verifies packages against live registries in 19 ecosystems
• •Typosquat detection by Levenshtein distance to popular package names
• •Live CVE intel from OSV, CISA KEV, EPSS, and the OpenSSF malicious feed
• •Severity, fix version, and migration path returned in one call
• •~300-token briefs replacing 4–8k tokens of scraping per decision (−74%)

💡 Value Assessment

With a free tier available, DepScope is an easy recommendation for anyone looking to try ai security & testing tools without financial commitment. The paid plans offer good value for power users who need the additional features and higher usage limits.