Oppsy launches in summer 2026. The waitlist is open now. Get instant alerts when new CVEs hit your dependencies via Slack, Discord, Telegram, email, or signed webhooks. Works with any codebase, not just GitHub. Supports 30+ ecosystems via OSV. Filter by severity, upload lockfiles via UI or REST API, and keep your source code private; it never leaves your machine. No per-seat fees. No enterprise contracts. No agent to install.
Hey, Product Hunt! I'm the maker of Oppsy.
The idea started with a real frustration. I used AI a lot and saw that agents are great at adding dependencies, but they miss new vulnerabilities published after their training ends. CI checks help, but they only run when you push code. If a CVE appears the day after your last commit, you might not know until your next build, or even worse, until a user reports it.
So I checked out the tools already out there and noticed a gap:
* Dependabot only works on GitHub repos and creates pull requests, which is helpful, but it limits you to about 10 ecosystems and locks you into one Git host.
* Snyk and Socket are solid options, but they can get expensive for small teams.
* OSV-Scanner is a great CLI tool, but it’s pull-based. You have to run it yourself; it doesn’t run automatically.
Oppsy is built to run quietly in the background. Just upload your lock file once or push it from CI, set up your notification channel, and you’re done. We’ll check your dependencies every time the OSV database updates, not just when you push code.
We’re opening a waitlist today. The full product will be ready in summer 2026. If you join early, you’ll get priority access and a discount.
Feel free to ask any questions below!
Report
No reviews yetBe the first to leave a review for Oppsy — Dependency Vulnerability Alerts
Sketch Cache Cleaner