On the recordRead 11 Oct 202615 facts
MergeBase
Plans and prices
Team
$38a month
CI/CD integration · license analysis · container scanning · Jira/Boards integration
Read 11 Oct 2026 · mergebase.com
Business
Priced on request
SBOM support · SIEM integration · custom policies · Slack and Teams
Read 11 Oct 2026 · mergebase.com
Enterprise
Priced on request
Dynamic hardening · runtime monitoring · SSO · on-prem option
Read 11 Oct 2026 · mergebase.com
On the record
- CI/CD integrations
- Listed CI/CD integrations include GitLab, Jenkins, Bamboo, TeamCity, Azure DevOps, Bitbucket Pipelines, and GitHub Actions.mergebase.com · read 11 Oct 2026
- Compliance
- The company site describes MergeBase as SOC 2 certified.mergebase.com · read 11 Oct 2026
- Deployment
- The Enterprise tier lists an on-prem option to run MergeBase in a private cloud or data center.mergebase.com · read 11 Oct 2026
- Developer guidance
- The platform provides upgrade guidance and says it can apply fixes automatically through AutoPatching.mergebase.com · read 11 Oct 2026
- Enhanced plugin mode
- In enhanced mode, scans may upload build files and component hashes to isolated customer-assigned cloud servers; the policy says source code files such as .java and .cs are not uploaded.mergebase.com · read 11 Oct 2026
- Languages
- The platform page lists support for Java, Python, Scala, Ruby, JavaScript, Go, PHP, Elixir, C, C++, .NET, Rust, Swift, and Dart.mergebase.com · read 11 Oct 2026
- Product
- MergeBase is a software composition analysis platform for finding and managing vulnerable open-source components in applications.mergebase.com · read 11 Oct 2026
- Runtime protection
- MergeBase says its runtime capability detects and defends against known vulnerabilities in production applications.mergebase.com · read 11 Oct 2026
- SBOM
- The platform generates Software Bill of Materials reports and offers SBOM support for source projects.mergebase.com · read 11 Oct 2026
- Security
- MergeBase describes its plugins as initially operating in basic mode, where they do not use network activity or store data outside company assets.mergebase.com · read 11 Oct 2026
- Security integrations
- The integrations page lists IBM QRadar, Splunk, Slack, Microsoft Teams, Jira, ThreatConnect, Kenna Security, and Nucleus.mergebase.com · read 11 Oct 2026
- Source control
- The integrations page lists GitHub, Bitbucket, and GitLab, and says other source control systems can be scanned with the MergeBase command-line tool.mergebase.com · read 11 Oct 2026
- Support
- The Team and Business tiers list email support, while Enterprise lists dedicated support.mergebase.com · read 11 Oct 2026
- Who it is for
- The company describes MergeBase as supporting security-conscious businesses and teams working across the software development lifecycle.mergebase.com · read 11 Oct 2026
