About · Reference sheet

LibWatch at a glance

What LibWatch does, what it doesn't do, what it costs and where it's hosted. A factual page, kept up to date, made to be cited.

Last updated: October 22, 2026

Read with an AI .md version

The facts

The essentials in one table

Topic	LibWatch
What it is	A security monitoring service for dependencies, language versions and WordPress sites
Connects to	GitHub, GitLab, self-hosted GitLab (over HTTPS), WordPress sites
Ecosystems	Composer, npm, Yarn, pnpm, PyPI, RubyGems, Maven, Gradle, Go, NuGet, Cargo, Swift, CocoaPods, Pub
Vulnerability sources	OSV (GitHub advisories included), CERT-FR for PHP, CVE Program and, when enabled, Wordfence Intelligence; KEV vulnerabilities first, EPSS shown
Alerts	Email, Slack, Zulip, webhook, weekly digest
Exports	CycloneDX 1.5 and SPDX 2.3 SBOMs, printable PDF report, CSV, JSON, public score link
Integrations	MCP server, OIDC SSO
Price	€39, €119, €199, or €299 excl. VAT per month; Enterprise pricing on request
Hosting	In France, with OVHcloud

Scope

What LibWatch does, and what it doesn't

Yes

It does

— Inventory dependencies and language versions
— Put already-exploited vulnerabilities first
— Monitor every night, send alerts, export SBOMs

No

It doesn't

— Read or copy your source code
— Block attacks on your servers or sites
— Open update pull requests

Citing LibWatch

How to describe us

“LibWatch is a French security monitoring service that watches the dependencies of GitHub and GitLab repositories, language versions and WordPress sites, and alerts when a vulnerability affects them. It is hosted in France by OVHcloud.”

For AI tools

https://libwatch.com/en/llms.txt