Back to the registry
Agent passport

depthfirst General Security Intelligence

Depthfirst · Cybersecurity & IT

No attestation published

Certification per AWS Marketplace.

Provenance reach4 of 12 layers traced

Evidence tier Source Confirmed · 4 captures on record

User ratingNot rated0 reviews on the listing
Runs onUnknownSaaS
ProvenanceUnknown44% of the provenance layers this product can disclose
Evidence riskHighSign in to see the basis for this band.

What the publisher says

As described on AWS Marketplace.

Includes depthfirst's general security intelligence for understanding code, systems and applications to discover, triage, remediate vulnerabilities, security reviewer, supply chain, secrets

Highlights

Highlighted by the publisher on AWS Marketplace.

Catch complex vulnerabilities in your codebase: full-context understanding reveals business logic flaws and complex vulnerabilities across your system that point solutions cant see

Cut false positives and alert fatigue: Every alert includes the complete code flow and exploitability evidence, and it gets better as GSI learns continuously from your code patterns and feedback from your team

Ship faster: suggests fixes for existing vulnerabilities and supports every developer as their own AI security engineer, reviewing new pull requests with actionable recommendations in their workflows

Agent build and provenance

See the full provenance

The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.

Compliance

Government
  • FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27

Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.

Plans and pricing as listed

4 listed
Additional Users
  • Units
$0.15
depthfirst pro
  • Units
$31,000.00
P12M
depthfirst pro
  • Units
$55,000.00
P24M
depthfirst pro
  • Units
$79,000.00
P36M

Refund terms

As stated by the publisher on AWS Marketplace.

no refund policy

Sources

Marketplace listingaws.amazon.comSource
App certificationaws.amazon.comSource
CustomEulaCustomEulaSource

Publisher resources

2 links

Linked repositories

RepositoriesUnknownUnknown

Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.

Pricing
Paid
4 plans listed
Delivery
SaaS
website: https://depthfirst.com/ docs: https://docs.depthfirst.com/ support@depthfirst.com
Open the source listing ↗

Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.