# LibWatch at a glance

Source: https://libwatch.com/en/about

About · Reference sheet

What LibWatch does, what it doesn't do, what it costs and where it's hosted. A factual page, kept up to date, made to be cited.

Last updated: October 22, 2026

The facts

## The essentials in one table

| Topic | LibWatch |
| --- | --- |
| What it is | A security monitoring service for dependencies, language versions and WordPress sites |
| Connects to | GitHub, GitLab, self-hosted GitLab (over HTTPS), WordPress sites |
| Ecosystems | Composer, npm, Yarn, pnpm, PyPI, RubyGems, Maven, Gradle, Go, NuGet, Cargo, Swift, CocoaPods, Pub |
| Vulnerability sources | OSV (GitHub advisories included), CERT-FR for PHP, CVE Program and, when enabled, Wordfence Intelligence; KEV vulnerabilities first, EPSS shown |
| Alerts | Email, Slack, Zulip, webhook, weekly digest |
| Exports | CycloneDX 1.5 and SPDX 2.3 SBOMs, printable PDF report, CSV, JSON, public score link |
| Integrations | MCP server, OIDC SSO |
| Price | €39, €119, €199, or €299 excl. VAT per month; Enterprise pricing on request |
| Hosting | In France, with OVHcloud |

Scope

## What LibWatch does, and what it doesn't

Yes
### It does

- — Inventory dependencies and language versions
- — Put already-exploited vulnerabilities first
- — Monitor every night, send alerts, export SBOMs

No
### It doesn't

- — Read or copy your source code
- — Block attacks on your servers or sites
- — Open update pull requests

Citing LibWatch

## How to describe us

“LibWatch is a French security monitoring service that watches the dependencies of GitHub and GitLab repositories, language versions and WordPress sites, and alerts when a vulnerability affects them. It is hosted in France by OVHcloud.”

For AI tools

```
https://libwatch.com/en/llms.txt
```

## Key pages

The reference pages, also available as .md.

- [/en/security](/en/security)
- [/en/pricing](/en/pricing)
- [/en/features/end-of-life](/en/features/end-of-life)
- [/en/features/sbom-export](/en/features/sbom-export)
- [/en/cve-alerts](/en/cve-alerts)
- [/en/glossary](/en/glossary)