Safedep

SafeDep is an open-source software supply chain security company that protects developers and AI agents from malicious open-source packages, MCP servers, IDE extensions, and plugins. Its unified platform provides real-time discovery of every external component flowing into an organisation's stack, an AI-powered threat intelligence engine that detects typosquats, obfuscated code, and data exfiltration patterns on average 14 hours before public advisories, and enforcement layers spanning developer IDEs, CI/CD pipelines, and AI coding agents such as Cursor, Claude, and Windsurf. SafeDep continuously scans public package registries including npm and PyPI, enabling teams to block malicious dependencies before they execute. The platform covers the full supply chain lifecycle: discovery, assessment, endpoint enforcement, pipeline enforcement, and governance with compliance-ready reporting. Founded in April 2024 by Abhisek Datta.