OpenHack Supply Chain

Plans and prices

Every plan, in full

On the record

AI data handling

OpenHack says customer data is not used to train, fine-tune, or improve AI models, and that inference is stateless with no input-data retention.openhack.com · read 11 Oct 2026

Audit reports

Supply chain reports include an executive risk summary, prioritized remediation plan, dependency and license context, time-to-fix metrics, and remediation evidence.openhack.com · read 11 Oct 2026

Compliance

The Trust Center lists HIPAA and GDPR as compliant, while SOC 2 Type I and ISO 27001 are in progress.openhack.com · read 11 Oct 2026

Dependency mapping

It maps direct and transitive dependencies from manifests and lockfiles across connected repositories.openhack.com · read 11 Oct 2026

Fixes

For supported npm and PyPI dependency updates, it can prepare a fix pull request for the team to review and merge.openhack.com · read 11 Oct 2026

GitHub integration

The Free plan includes GitHub integration, and the Trust Center says customer source code is accessed read-only through authorized GitHub integrations.openhack.com · read 11 Oct 2026

Intended users

The product page describes reports for security reviewers and enterprise buyers, while the pricing page presents plans for startups and enterprises.openhack.com · read 11 Oct 2026

Malicious packages

Its supply chain intelligence identifies and blocks malicious packages in npm and PyPI.openhack.com · read 11 Oct 2026

Purpose

OpenHack Supply Chain combines software composition analysis and supply chain intelligence to find vulnerable dependencies and identify malicious dependencies.openhack.com · read 11 Oct 2026

SBOM

It exports dependency inventories as CycloneDX 1.5 JSON, including package names, resolved versions, available license information, and dependency relationships.openhack.com · read 11 Oct 2026

Security controls

The Trust Center lists encryption at rest and in transit, encrypted database backups, multi-factor authentication, least-privilege access, and organization-scoped data access.openhack.com · read 11 Oct 2026

Source-code handling

OpenHack says code is downloaded temporarily for analysis and deleted after scan completion, and that it does not modify, fork, or retain repository copies.openhack.com · read 11 Oct 2026

Support

Enterprise pricing lists guided onboarding, dedicated customer success, a custom SLA, and priority phone and email support.openhack.com · read 11 Oct 2026

Version drift

It compares installed package versions across repositories to surface version drift and components needing attention.openhack.com · read 11 Oct 2026

Alternatives to OpenHack Supply Chain

D DepWardenWebWindows+4 S ScantistWebAPI+1 D DeepFilterNetWindowsMac+3 G GrypeWindowsMac+2 EL Endor LabsWebWindows+5 SO Snyk Open SourceWebWindows+3 S SocketWebWindows+5 TD Twira Dependency VulnerabilitiesWindowsMac+3

Every alternative, ranked