Kusari
Kusari: Kusari combines dependency intelligence, compliance controls, and automated remediation. Ranked #8 of 28 in Dependency Management Software by our editors (8.0/10); pricing: Free plan; best for teams wanting dependency risk and auto-fix workflows.
At a glance
- Editor score8.0 / 10
- PricingFree plan
- Best forTeams wanting dependency risk and auto-fix workflows
- Free planYes
- Paid from$25/user/mo
- Ecosystem coverageMulti-language and containers
- Founded2022
- Facts checked20 Sep 2026
Where it wins
- Source-built graphs show direct and transitive dependencies.
- AutoFix creates automated remediation pull requests.
- SBOM, VEX, license, and vulnerability controls work together.
Where it doesn't
- No self-hosted deployment option.
- The free plan applies only to owned or qualifying projects.
- The broader Kusari Platform is demo-led rather than publicly priced.
Our verdict on Kusari
Kusari is a software supply chain security platform for engineering, security, and compliance teams. It builds a continuously updated dependency graph from source, build artifacts, SBOMs, VEX documents, and scanner findings. Teams can use it to examine direct and transitive dependencies, detect and prioritize vulnerabilities, assess reachability, enforce license policies, manage SBOMs, and review pull requests across multiple languages and infrastructure ecosystems.
Pricing is split between a free option and a paid team plan. Solo developers and open source users can use Kusari free for repositories they own, as well as for projects under the OpenSSF or CNCF. Inspector for teams costs $25 USD per developer per month, billed monthly, and adds pull-request security reviews, coverage for every repository the organization owns, and volume pricing. The platform connects with GitHub, GitLab, Jenkins, Azure DevOps, CircleCI, Bitbucket Pipelines, TeamCity, Jira, ServiceNow, Slack, Microsoft Teams, webhooks, Snyk, Black Duck, and Prisma Cloud. API access is also available.
Its strongest distinction is the combination of dependency intelligence and workflow action. Vulnerability prioritization can include reachability analysis, while policy controls cover licenses and merge decisions. Kusari AutoFix generates remediation pull requests, and Kusari Agent supports natural-language queries across the software estate. SBOM and VEX ingestion, storage, monitoring, and generation extend the product beyond alerting. Teams that need centralized visibility, compliance workflows, and pull-request remediation should consider Kusari. It is less suitable for organizations requiring self-hosted deployment or a publicly itemized broader Platform plan.
Your product? Our editors can test Kusari in depth and publish a review, labelled as paid · from $149/mo →
Kusari pricing
All 2 Kusari plans and prices →
Kusari fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $25/user/mo |
| Ecosystem coverage | Multi-language and containers |
| Update automation | Pull requests |
| Vulnerability alerts | Yes |
| License compliance | Yes |
| SBOM support | Yes |
| Self-hosted deployment | No |
| Included projects | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Compliance & security | SOC 2 |
| Support | Email, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 17 integrations: GitHub, GitLab, Jenkins, Azure DevOps, CircleCI, Bitbucket Pipelines … See all → |
| Pricing | Free plan (source) |
| Website | kusari.dev |
| Facts checked | 20 Sep 2026 |
Kusari integrations
Kusari lists 17 integrations on its own site.
- GitHub
- GitLab
- Jenkins
- Azure DevOps
- CircleCI
- Bitbucket Pipelines
- TeamCity
- Jira
- ServiceNow
- Slack
- Microsoft Teams
- Webhooks
- Snyk
- Black Duck
- Prisma Cloud
- Dependabot
- GitHub Advanced Security
Alternatives to Kusari
- RenovateA broad, configurable choice for teams automating dependency maintenance across repositories.9.4
- Mend RenovateA flexible dependency automation suite with broad ecosystem coverage and self-hosted options.9.2
- UpdatecliA flexible open-source CLI for automating updates across repositories, languages, and containers.8.8
Kusari vs the competition
- Kusari vs Renovate
- Kusari vs Mend Renovate
- Kusari vs Updatecli
- Kusari vs Depfu
- Kusari vs StackRadar
- Kusari vs DepsHub
Compare Kusari with any tool side by side →
Also Ranked In
Kusari is ranked in 2 of our directories.
Used Kusari? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Kusari for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Kusari is listed in our Dependency Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kusari/"><img src="https://www.itechguides.com/best/badge/kusari.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update