This page's audience our own tag's counts — open to see them

Period

–Visits

–Page views

–Clicks to vendors

–Time on page

–Reading now

Clicks to vendors, by tool

Top countries

Devices

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

deppbot

Freemium#60 of 65 in Software Composition Analysis Software

deppbot: A focused Ruby dependency updater for GitHub teams that want scheduled pull requests. Ranked #60 of 65 in Software Composition Analysis Software by our editors (5.3/10); pricing: Free plan · 14-day trial; best for small Ruby teams wanting automated dependency updates.

5.3/10Editor score

Visit deppbot

deppbot5.3 Visit deppbot

At a glance

Editor score
5.3 / 10
Pricing
Free plan · 14-day trial
Best for
Small Ruby teams wanting automated dependency updates
Free plan
Yes
Facts checked
20 Sep 2026

Where it wins
- Scheduled Bundler updates with configurable frequencies
- Security pull requests for vulnerable Ruby gems
- Supports GitHub, Bitbucket, and RubyGems workflows
Where it doesn't
- Ruby-only scope limits coverage across other ecosystems
- No SBOM or dependency reachability features
- No pull-request scanning beyond dependency update workflows

Our verdict on deppbot

deppbot is a hosted dependency-update service for Ruby projects using Bundler, Gemfile, and Gemfile.lock. It runs scheduled bundle updates on subscribed repositories, creates branches and GitHub pull requests for Gemfile.lock changes, and can open security update pull requests when vulnerable Ruby gems are detected. It is aimed at small Ruby teams that want automated dependency maintenance without adopting a broad software composition analysis platform.

Its plan structure is straightforward. The Free plan covers all public repositories and includes daily bundle updates without a credit card. Solo covers one private repository, Team covers three, and Plus covers ten; each paid tier includes a 14-day free trial and daily bundle updates. The plans also show yearly billing options, and a two-month-free statement is presented alongside the billing choices. Update frequency can be set to 1 day, 3 days, 5 days, 1 week, or 2 weeks, giving teams control over how often dependency changes are proposed.

Platform fit is strongest for GitHub-based Ruby workflows. deppbot creates branches and pull requests on GitHub, while private RubyGems hosted on Bitbucket can be processed with collaborator access. During processing, the repository is cloned and the cloned source is deleted immediately after the bundle update run. The narrow scope is also its main boundary: teams working across multiple programming ecosystems, or those needing SBOM generation, reachability analysis, or broader pull-request scanning, should choose a more comprehensive SCA product. deppbot suits Ruby teams focused specifically on scheduled dependency updates and security fixes.

Your product? Our editors can test deppbot in depth and publish a review, labelled as paid · from $149/mo →

deppbot pricing

Plans Free plan · 14-day trialFreemium A usable free plan; paid tiers unlock the limits above. Prices checked 20 Sep 2026.

See plans on deppbot.com

All 4 deppbot plans and prices →

deppbot fact sheet

Free plan	Yes
Paid from	Not verified
Supported ecosystems	RubyGems, Bundler, Gemfile, Gemfile.lock
SBOM generation	Not verified
Reachability analysis	Not verified
Pull request scanning	Not verified
Monitored projects	1 projects
Deployment options	Cloud
Free trial	14 days · no card needed
Deployment	Cloud
Platforms	Web
Support	Email, Docs
Built for	Solo, Small business (editorial estimate)
Integrations	3 integrations: GitHub, Bitbucket, RubyGems.org
Pricing	Free plan · 14-day trial (source)
Website	deppbot.com
Facts checked	20 Sep 2026

deppbot integrations

deppbot lists 3 integrations on its own site.

GitHub
Bitbucket
RubyGems.org

Alternatives to deppbot

See all deppbot alternatives →

Used deppbot? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used deppbot for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Title

Your review

0 characters · at least 80, up to 3,000

Pros (optional · one per line)

Cons (optional · one per line)

Your name (shown with your review)

Role (optional)

Company (optional)

How long have you used it?

I've used deppbot myself and this is my honest opinion — nobody paid or asked me to write it.

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

deppbot is listed in our Software Composition Analysis Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/deppbot/"><img src="https://www.itechguides.com/best/badge/deppbot.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update