CypherEra
CypherEra: Behavioral pipeline and artifact tracing for teams managing software supply chain risk. Ranked #20 of 24 in Software Supply Chain Security Software by our editors (7.2/10); pricing: Pricing on request; best for teams focused on behavioral pipeline threats.
At a glance
- Editor score7.2 / 10
- PricingPricing on request
- Best forTeams focused on behavioral pipeline threats
- Free planNo
- Dependency analysisYes
- Founded2025
- Facts checked20 Sep 2026
Where it wins
- Screens packages and CI actions for behavioral supply chain threats
- Traces artifacts to source commits, workflow runs, and runners
- Connects provenance, credentials, cloud, identity, and workload context
Where it doesn't
- Custom-quote pricing can make budgeting less direct
- No free plan is available for initial evaluation
- ISO 27001 and SOC 2 Type II are still in progress
Our verdict on CypherEra
CypherEra is a cloud security platform with software supply chain risk capabilities for startups, mid-market organizations, and enterprises. It monitors build pipelines, CI actions, incoming packages, published artifacts, base images, build credentials, and publisher identity. Teams focused on behavioral pipeline threats can use it to screen package and third-party CI action behavior before build use, while tracing supply chain signals through a security graph.
Pricing follows a contact-sales model, with custom quotes rather than public plan amounts and no free plan. The platform is delivered through web and API access. Its integration coverage spans AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, DigitalOcean, Microsoft 365, Google Workspace, CyberArk, GitHub, GitLab, Azure DevOps, Docker Hub, Kubernetes, and MongoDB. That mix connects cloud, identity, repositories, registries, workloads, and collaboration environments, making CypherEra a fit for organizations with varied development and infrastructure estates.
Its clearest strength is the depth of its supply chain analysis. CypherEra detects install-time scripts, typosquatting, maintainer changes, and dependency confusion; tracks published images, packages, binaries, and registries; monitors base-image lineage and tag movement; and analyzes build credential reach and permissions. Artifact tracing links outputs to source commits, workflow runs, and runners, while software bills of materials and provenance evidence support release and investigation workflows. Category capabilities include source repository security, dependency analysis, SBOM management, build provenance, artifact signing, provenance attestations, and release policy gates. Organizations needing behavioral screening and provenance context should consider it; teams prioritizing a free starting tier or completed ISO 27001 and SOC 2 Type II certifications should look elsewhere.
Your product? Our editors can test CypherEra in depth and publish a review, labelled as paid · from $149/mo →
CypherEra pricing
CypherEra fact sheet
| Free plan | No |
|---|---|
| Paid from | Not verified |
| Source & repo security | Yes |
| Dependency analysis | Yes |
| SBOM management | Yes |
| Build provenance | Yes |
| Artifact signing | Yes |
| Provenance attestations | Yes |
| Release policy gates | Yes |
| Deployment | Cloud |
| Platforms | Web |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 18 integrations: AWS, Azure, Google Cloud, Oracle Cloud, Alibaba Cloud, DigitalOcean … See all → |
| Pricing | Pricing on request (source) |
| Website | cypherera.com |
| Facts checked | 20 Sep 2026 |
CypherEra integrations
CypherEra lists 18 integrations on its own site.
- AWS
- Azure
- Google Cloud
- Oracle Cloud
- Alibaba Cloud
- DigitalOcean
- Microsoft 365
- Google Workspace
- CyberArk
- GitHub
- GitLab
- Azure DevOps
- Docker Hub
- Kubernetes
- MongoDB
- Salesforce
- Cloudflare
- Jira
See all CypherEra integrations →
Alternatives to CypherEra
- DevGuardBroad supply-chain security coverage with self-hosted and managed deployment options.9.4
- ChainloopOpen-source evidence management with policy gates and enterprise governance options.9.2
- Anchore EnterpriseDeep SBOM, vulnerability, malware, secrets, and policy controls for hybrid pipelines.9.0
See all CypherEra alternatives →
Used CypherEra? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used CypherEra for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
CypherEra is listed in our Software Supply Chain Security Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/cypherera/"><img src="https://www.itechguides.com/best/badge/cypherera.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update