Vulert monitors open-source dependencies for vulnerabilities and license compliance without accessing source code.
- Based in
- London, United Kingdom
- Founded
- 2022
- Ownership
- Private
About Vulert
Vulert provides software composition analysis and vulnerability alerts for open source dependencies. It sells a monitoring service that scans a dependency manifest or SBOM to find known vulnerabilities. The service then continuously checks those dependencies and alerts users when new vulnerabilities are disclosed. It works without accessing source code or installing an agent. Users upload a file and receive results in about a minute. The company serves software teams, from solo developers to larger firms, including those in fintech and healthtech. It offers version-specific remediation guidance, showing fixes for the exact version in use. It also helps with open source license compliance and legal obligation tracking. Pricing is per monitored application per month, with a 30-day trial. Vulert is based in London and was founded in 2022.
Products
- Vulert ScannerA tool that scans a dependency manifest or SBOM to find known vulnerabilities without needing source code access.
- Vulert Docker SCAA service that checks and monitors Docker containers or images for vulnerabilities using a Docker Compose file or similar configuration.
- Vulert License ViolationA feature that checks for license violations in open source dependencies and notifies users of restricted or problematic licenses.
- Vulert Legal ObligationA feature that helps users understand the legal actions required by specific software licenses and provides instructions to comply.
- Vulert APIAn interface that provides version-specific remediation guidance for vulnerabilities.
- Vulert MCPA connection that allows MCP-compatible coding agents to scan dependency files and apply fixes on request.