- Is it safe? What GeekWala says it does with your chats and data, from its own policy pages.See ↓
- Is it free? Free plan · From $12/mo · pricing page, read Oct 22, 2026See ↓
- What else does this?
Snykfree
Sonatypefree
Fluid AttacksSee ↓
≈ 7visits/mo
Use not read yet · estimate, read Oct 22, 2026
- For
- developers and security teams deciding which vulnerable dependencies to fix first
- Price
- Free plan · From $12/mopricing page, read Oct 22, 2026Trial & discounts: 7-day free trial · save 31% yearly
- Activity
- Actively maintainedrelease 6 months ago · site updated 11 days ago
- How it runs
- API
- Used for
- scan package manifests and lockfiles for known vulnerabilities
- rank flagged CVEs by active exploitation and exploit probability
- schedule re-scans and receive email alerts for new findings
- On the web since 2013, older than 95% of its shelfINITE Atlas
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsgeekwala.com ↗
Free plan · From $12/mo
Trial & discounts 7-day free trial · save 31% yearly
- Certifications they stateGDPRprivacy policy ↗
- Privacy policy updated2026-01-30privacy policy ↗
- Security contactsecurity.txt
These are GeekWala's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.geekwala/dependency-scannerverified in the MCP registry
- Stateanswers, requires sign-inchecked 2026-10-22
- Address to connectwww.geekwala.com/mcp
- MCP docsgeekwala.com/integrations/mcpthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Snyk
Scans source code, open source dependencies, container images and infrastructure-as-code for vulnerabilities, and suggests fixes in the IDE, CLI and pull requests.
63.1kActiveFrom $25/mo2015 - #2
SonatypeMCP · sign-in
Hosts artifact repositories and scans open source dependencies, blocking malicious or vulnerable components before they enter builds.
69.4kActiveFrom $1,200/yr2008 - #3
Fluid Attacks
Scans applications for vulnerabilities with automated tools and human penetration testing, ranks findings by exploitability and tracks their remediation.
4.3kActive - #4
Autonomous pentesting, continuous monitoringMCP · sign-in
Scans web apps, networks and cloud for vulnerabilities, then exploits them where supported to prove risk, with reports and an autonomous pentest agent.
107kActiveFrom $96/mo2017 - #5
ShipReady MetricsMCP · open
Scores engineering and security posture from connected repositories and cloud systems, mapping findings to compliance frameworks and estimating risk dollars.
42.9kActiveFrom $29.99/user/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use GeekWala for?
Sign in to leave a noteWhat is GeekWala?
Scans package manifests and lockfiles for known vulnerabilities, ranking findings by exploit probability and CISA KEV status. It is listed in the Atlas under Security.
Who is GeekWala for?
developers and security teams deciding which vulnerable dependencies to fix first
How much does GeekWala cost?
GeekWala has a free plan; paid plans start at $12/mo, per its pricing page on 2026-10-22.
Is GeekWala free?
Yes, GeekWala has a free plan, per its pricing page on 2026-10-22.
Is GeekWala still maintained?
Actively maintained: release 6 months ago · site updated 11 days ago.
Is GeekWala safe?
We do not audit vendors. What GeekWala publishes, read 2026-10-22: GDPR stated on its privacy policy.
Does GeekWala have a free trial?
Yes, a 7-day free trial, per its pricing page (2026-10-22).
How do I cancel GeekWala?
In its own words (terms of service, 2026-10-22): “You can cancel at any time from the Billing page.”
What are alternatives to GeekWala?
In Security, by use: Snyk, Sonatype, Fluid Attacks, Autonomous pentesting, continuous monitoring, ShipReady Metrics.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.