Dependabot automatically opens pull requests to update vulnerable dependencies. It is built into GitHub, so it is native to every GitHub repository. Maintainers review the generated pull requests like any other change. The listing describes the feature as free for GitHub repositories. The feature page is available at github.com/features/security.
How Dependabot compares with its closest alternatives
All 5 closest alternatives have a free plan, as Dependabot does. All 5 offer an API; FalcoScan's records show none for Dependabot. Dependabot offers a web app. Of the alternatives, 4 offer a web app. Dependabot was founded in 2019; the alternatives were founded between 2010 and 2022, 2 of them earlier. Dependabot has no single headquarters on record, and 1 of its alternatives is also distributed.
Market position · Security
How Dependabot compares in Security
Dependabot has moderate opportunity and sits in the bottom third of 361 live Security tools on FalcoScan. Across Security, the average opportunity score is 70.4 and the average saturation score 33. FalcoScan rates Dependabot's own market position as contested. 121 of the 361 operating Security tools have hot momentum, and FalcoScan has recorded 1 shutdown in the category.
The closest alternatives to Dependabot that are still running, matched on the AI capabilities, uses and audience they share, are Renovate, Aikido Security, Bearer, Cycode, and OWASP ZAP.
Is Dependabot still running?
Yes. As of 1 November 2026, FalcoScan lists Dependabot as operating at github.com.
Where is Dependabot based?
Dependabot has no single headquarters: FalcoScan's records list it as a distributed, remote-first company.
Does Dependabot have an API?
FalcoScan's records show no public API for Dependabot.
Who is Dependabot for?
Dependabot is built for developers and security teams.
How do I sign in to Dependabot?
Sign in on Dependabot's own website, github.com. FalcoScan reviews Dependabot but does not run its accounts, so logins, passwords and billing are handled by Dependabot directly.