Chainsaw by Chain305
Free plan · From $25/user/moActively maintained
not read yet
Use
- For
- Engineering teams and developers guarding npm, pip, cargo, gem and go installs against malicious or typosquatted packages
- Price
- Free plan · From $25/user/mopricing page, read Oct 30, 2026Trial & discounts: save 20% yearly · 14-day money back
- Activity
- Actively maintainedrelease 5 days ago · site updated 5 days ago
- Company
- since 2026per Wikidata
- Used for
- Refuse typosquatted or malicious packages before they download
- Enforce one signed policy across CI, registries and laptops
- Gate pull requests on dependency changes
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantschain305.com ↗
Free plan · From $25/user/mo
Trial & discounts save 20% yearly · 14-day money back
- Founded2026per Wikidata
- HeadquartersDubai International Financial Centre (DIFC), Dubai, AEper their site
- Trains on your dataNoprivacy policy ↗
- Certifications they stateSOC 2 · ISO 27001 · GDPR · CCPAsecurity page ↗
- Privacy policy updated2026-10-27privacy policy ↗
- Security contactsecurity.txt
“We do not use your audit logs, SBOMs, or policy configurations to train machine-learning models.”
privacy policy ↗
These are Chainsaw by Chain305's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.chain305/chainsawverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-30
- Address to connectchain305.com/chainproxy/mcp
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Sonar
Analyzes source code statically in IDEs, CI pipelines and pull requests, reporting bugs, code smells, vulnerabilities and coverage against quality gates.
72.4kActiveFrom $34/mo2007 - #2
SonatypeMCP · sign-in
Hosts artifact repositories and scans open source dependencies, blocking malicious or vulnerable components before they enter builds.
69.4kActiveFrom $1,200/yr2008 - #3
APort
Enforces authorization policies for AI agents before they execute shell commands, access files, call tools, or modify repositories.
395ActiveFrom $499/mo2024 - #4
Execlave
Enforces policies on AI agent actions before they reach external systems, with real-time blocking and audit logging.
43 linking domainsActiveFrom $199/mo - #5
Guardian IDE
Enforces architecture and security policies on AI-assisted code changes with human approval gates before release.
2Maintained
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use Chainsaw by Chain305 for?
Sign in to leave a noteWhat is Chainsaw by Chain305?
Blocks malicious and typosquatted package installs from npm, pip, cargo, gem and go with a local shell hook before download. It is listed in the Atlas under Security.
Who is Chainsaw by Chain305 for?
Engineering teams and developers guarding npm, pip, cargo, gem and go installs against malicious or typosquatted packages
How much does Chainsaw by Chain305 cost?
Chainsaw by Chain305 has a free plan; paid plans start at $25/user/mo, per its pricing page on 2026-10-30.
Is Chainsaw by Chain305 free?
Yes, Chainsaw by Chain305 has a free plan, per its pricing page on 2026-10-30.
Is Chainsaw by Chain305 still maintained?
Actively maintained: release 5 days ago · site updated 5 days ago.
Does Chainsaw by Chain305 train AI on your data?
No, per its privacy policy (2026-10-30): “We do not use your audit logs, SBOMs, or policy configurations to train machine-learning models.”
Is Chainsaw by Chain305 safe?
We do not audit vendors. What Chainsaw by Chain305 publishes, read 2026-10-30: SOC 2, ISO 27001, GDPR, CCPA stated on its security page; on training with your data, “We do not use your audit logs, SBOMs, or policy configurations to train machine-learning models.”.
How do I cancel Chainsaw by Chain305?
In its own words (terms of service, 2026-10-30): “You can cancel at any time from the billing dashboard; cancellation takes effect at the end of the current period and retains access until then.”
Does Chainsaw by Chain305 give refunds?
In its own words (terms of service, 2026-10-30): “A 14-day money-back guarantee applies to first-time paid upgrades — see the Refund Policy.”
What are alternatives to Chainsaw by Chain305?
In Security, by use: Sonar, Sonatype, APort, Execlave, Guardian IDE.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.