Xygeni
Xygeni: Broad SCA coverage with a free tier and deeper controls across paid plans. Ranked #13 of 65 in Software Composition Analysis Software by our editors (8.0/10); pricing: Free plan; best for teams wanting free broad SCA coverage.
At a glance
- Editor score8.0 / 10
- PricingFree plan
- Best forTeams wanting free broad SCA coverage
- Free planYes
- SBOM generationYes
- Facts checked19 Sep 2026
Where it wins
- Free plan includes SCA, SAST, secrets security, and an IDE plugin
- Reachability analysis, SBOMs, and malicious-package detection
- Scans connect to CI/CD pipelines and pull requests
Where it doesn't
- Free plan is limited to 10 repositories and 200 scans per month
- Reachability and autofix are listed on the Team plan
- Enterprise deployment and configuration options sit in the top tier
Our verdict on Xygeni
Xygeni combines software composition analysis with broader application and software supply chain security for development, DevOps, and security teams. Its SCA capabilities identify vulnerable open-source dependencies, analyze function-level reachability, generate SBOMs in CycloneDX and SPDX JSON formats, and support remediation through pull requests. A free plan gives teams an entry point for exploring this wider security toolset, though its repository and scan limits make it a more natural fit for smaller or early evaluations than for unrestricted coverage.
The SCA workflow is designed to fit existing development systems: Xygeni lists integrations for GitHub, GitLab, Azure DevOps, Bitbucket, Jenkins, Jira, and Slack, plus REST API and CI/CD pipeline integration. Pull-request and merge-request scanning, dependency inventory, and transitive dependency graph analysis complement the core vulnerability checks. Supported ecosystems include Maven, Gradle, npm, Yarn, Bower, .NET, Go, Python/Pip, PHP/Composer, Ruby, and Dart/Flutter. The combination is useful for teams seeking coverage across varied repositories, while the broad AppSec scope may be more than a team looking only for a lightweight dependency scanner needs.
According to the vendor's pricing page, Free supports up to 10 repositories and 200 scans per month, with SAST, SCA, Secrets Security, an IDE plugin, and up to 5 contributors. Team raises the limit to 100 repositories and offers unlimited scans, SCA reachability and autofix, AI SAST autofix, CI/CD security, and SDLC Inventory. Business covers up to 300 repositories and adds real-time open-source malware detection, malicious command detection, and SSCS compliance. Enterprise has custom pricing, configurable options, ASPM and third-party data ingestion, and optional on-premise deployment. Xygeni suits teams that value broad coverage and can grow into paid tiers; those seeking a simple, narrowly focused scanner may prefer a more limited tool.
Your product? Our editors can test Xygeni in depth and publish a review, labelled as paid · from $149/mo →
Xygeni pricing
All 4 Xygeni plans and prices →
Xygeni fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Not verified |
| Supported ecosystems | Maven, Gradle, npm, Yarn, Bower, .NET, Go, Python/Pip, PHP/Composer, Ruby, Dart/Flutter |
| SBOM generation | Yes |
| Reachability analysis | Yes |
| Pull request scanning | Yes |
| Monitored projects | 100 projects |
| Deployment options | Hybrid |
| Deployment | Cloud, Desktop, Self-hosted |
| Platforms | Web, Windows, macOS, Linux |
| Integrations | 8 integrations: GitHub, GitLab, Azure DevOps, Bitbucket, Jenkins, Git hooks … |
| Pricing | Free plan (source) |
| Website | xygeni.io |
| Facts checked | 19 Sep 2026 |
Xygeni integrations
Xygeni lists 8 integrations on its own site.
- GitHub
- GitLab
- Azure DevOps
- Bitbucket
- Jenkins
- Git hooks
- Jira
- Slack
Alternatives to Xygeni
- Snyk Open SourceBroad SCA coverage with reachability, SBOMs, pull-request scanning, and monitoring.9.4
- FOSSAA mature SCA platform covering dependencies, SBOMs, containers, licenses, and policy controls.9.3
- Safeguard SCAA budget-conscious SCA platform with reachability analysis, SBOMs, and remediation workflows.9.1
Also Ranked In
Xygeni is ranked in 3 of our directories.
Used Xygeni? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Xygeni for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Xygeni is listed in our Software Composition Analysis Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/xygeni/"><img src="https://www.itechguides.com/best/badge/xygeni.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update