DepWarden is free to use with no account and no installation — paste a manifest or point a plugin at your build and it reports every known vulnerability, malicious package and licence problem. The free tier writes an HTML report and never blocks a build. Paid plans add the parts a team needs to enforce something: PDF, Excel and CSV reports for compliance evidence, failing a build on a severity threshold, transitive fix paths that name which direct dependency to bump, SBOM and VEX export, scan history, and static analysis. Every plugin works without a key on the free tier, and setting the key to DEMO gives three full-fidelity evaluation scans. Self-hosted and air-gapped deployment are available on Enterprise — every client honours DEPWARDEN_API_URL, so nothing is hard-coded to our servers.