Security monitoring · dependencies, languages, WordPress

Vulnerabilities in your stack, seen first.

LibWatch monitors the dependencies in your GitHub and GitLab repositories, your language versions and your WordPress sites. It tells you when a vulnerability actually affects you, and what to fix first.

Analyze a project See pricing

14-day trial, then from €39 excl. VAT per month · Hosted in France by OVHcloud

Active alert PHP2Shell: two critical vulnerabilities in the PHP engine. Check your PHP projects →

What LibWatch can read

How it works

Three steps, then it runs on its own

No pipeline to change to get started: connecting your account is enough.

  1. Connect your projects

    GitHub, GitLab (self-managed included) or a WordPress site. Choose the repositories to monitor.

  2. LibWatch builds the inventory

    It reads your dependency files and language versions, and keeps only the list of packages and their versions.

  3. You hear about it when it matters

    Exploited vulnerabilities (KEV catalog) come first, then the most severe; alerts go out by email, Slack, Zulip or webhook.

What other scanners miss

More than a list of packages

Privacy

Your code stays with you

LibWatch reads your dependency files through the GitHub or GitLab API and keeps only the list of your packages and their versions. No repository is cloned, no code is executed.

What LibWatch keeps

  • — The name and version of each package
  • — The declared language versions
  • — The vulnerabilities found and their history

What it does not do

  • — Clone your repository: only dependency files are read, one at a time

All the details: permissions requested, tokens, hosting →

LibWatch in numbers

  • 14

    package managers

    From Composer to Pub, plus WordPress sites.

  • 2 a.m.

    nightly watch

    Every night, all your projects checked again.

  • 1 night

    for CERT-FR alerts on PHP

    A published alert is matched against your PHP versions at the next nightly check.

  • 14 days

    trial

    On the plan of your choice. Nothing is charged before the trial ends.

Frequently asked questions

Before you connect your repositories

Another question? Write to us →
Does LibWatch read my code?
No. It only reads your dependency files, one at a time, through the GitHub or GitLab API, and keeps the list of packages and their versions. No repository is cloned.
Do I need to change my CI pipeline?
No. LibWatch connects to GitHub or GitLab and reads your dependency files through their API: nothing to add to your pipeline.
Which ecosystems are covered?
Composer (PHP), npm, Yarn and pnpm (JavaScript), PyPI (Python), RubyGems (Ruby), Maven and Gradle (Java, Kotlin), Go, NuGet (.NET), Cargo (Rust), Swift and CocoaPods, Pub (Dart, Flutter), plus WordPress sites.
What happens at the end of the 14-day trial?
Your subscription to the plan you chose continues: its price is charged to your card, then every month. If you don't want to continue, cancel before the trial ends from the Subscription page in the app: nothing is charged. If a payment fails, you have 7 days to update your card.

Your first project is analyzed in minutes.

Connect a repository or a WordPress site. You will immediately see its vulnerabilities, its language versions and what needs fixing.

Analyze a project
Hosted in France by OVHcloud