Semgrep vs DepsHub
A side-by-side look at pricing plans, free tiers, features, pros and cons, updated for 2026. DepsHub has the lower starting price: about $19 a month, against $30 for Semgrep.
At a glance
Best for
Pricing model
Starting price
Free plan
Made by
Based in
Rating
Key features
- Semgrep Assistant AI triage
- Custom rules
- Supply chain scanning
- Secrets detection
- PR comments
- AI dependency updates
- Changelog analysis
- Cross-repository overview
- License compliance checks
- Security alerts
- Smart scheduling
| Feature | Semgrep | DepsHub |
|---|---|---|
| Best for | Code security scanning with AI triage and fix suggestions | AI dependency updates that read changelogs and fix breaking changes |
| Category | Coding | Coding |
| Pricing model | Freemium | Freemium |
| Starting price | $30/mo | $19/mo |
| Free plan | Yes | Yes |
| Made by | Semgrep | DepsHub |
| Based in | United States | – |
| Rating | No ratings yet | No ratings yet |
| Key features |
|
|
Pricing compared
DepsHub has the lower starting price: about $19 a month, against $30 for Semgrep.
Free plan
Cheapest paid plan
Top plan
Free trial
3 plans
Free
Free
- Up to 10 contributors
- Code (SAST) and Supply Chain
- GitHub/GitLab sign-in
Teams
$30/mo
- Per contributor, per product
- Cross-file analysis with Pro rules
- 20 AI credits per developer/mo
- Secrets at $15/contributor
Enterprise
Custom
- On-prem SCM support
- 50 AI credits per developer/mo
- Dedicated account manager
- Volume pricing
3 plans
Open Source
Free
- Free for open-source projects
- No credit card required
Professional
$19/mo
- Per code contributor
- Unlimited private repositories
- Unlimited integrations
- 24/7 chat support
Enterprise
Contact sales
- Custom plan
- Custom terms
Prices in USD, checked Oct 28, 2026 or later. Plans change often, so confirm on each tool's site before you buy.
Pros and cons
Semgrep
- Easy-to-write custom rules
- Free for small teams
- AI cuts false positives
- Per-contributor pricing at scale
- Advanced analysis needs paid plan
DepsHub
- Handles breaking changes, not just version bumps
- Free for open-source projects
- Unlimited repositories and team members
- Billed per code contributor
- GitHub is the main supported platform
- Language support still expanding
Which one should you choose?
Choose Semgrep if you want:
- Easy-to-write custom rules
- Free for small teams
- AI cuts false positives
Watch out: per-contributor pricing at scale.
Choose DepsHub if you want:
- Handles breaking changes, not just version bumps
- Free for open-source projects
- Unlimited repositories and team members
Watch out: billed per code contributor.
Semgrep vs DepsHub FAQ
What is the difference between Semgrep and DepsHub?
Semgrep: Code security scanning with AI triage and fix suggestions. DepsHub: AI dependency updates that read changelogs and fix breaking changes. Both are coding tools.
Is Semgrep or DepsHub cheaper?
DepsHub has the lower starting price: about $19 a month, against $30 for Semgrep.
Do Semgrep and DepsHub have free plans?
Semgrep: Yes. DepsHub: Yes.
Who makes Semgrep?
Semgrep is made by Semgrep, based in United States.
Who makes DepsHub?
DepsHub is made by DepsHub.
Which should I choose, Semgrep or DepsHub?
Choose Semgrep if you value easy-to-write custom rules and free for small teams. Choose DepsHub if you value handles breaking changes, not just version bumps and free for open-source projects.