Endor Labs review: reachability-first AI code security
Best for agent inventory with a free local tier · Rank T-3 of 10 · 3.9 / 5
Editorial assessment · Compiled from vendor product, docs, pricing and marketplace pages · Rated October 2026
ANSWER FIRST
Endor Labs ties for third at 3.9 out of 5. AURI inventories coding agents, models, MCP servers and skills and applies policy with an audit trail, and the free Developer tier runs locally. Paid prices are not published and no endpoint application is described.
diff --verdict endor-labs · reviewed 2026-09
@@ strengths @@
- Strength:Reachability analysis across dependencies, containers and first-party code. [source]
- Strength:AURI inventories coding agents, models, MCP servers and skills and applies policy at the moment of action. [source]
- Strength:MCP server for Cursor, Claude Code, VS Code with Copilot, Codex and Antigravity. [source]
- Strength:Free Developer tier runs locally with no account. [source]
@@ limitations @@
How does Endor Labs score?
| Criterion | Weight | Score | Why |
|---|---|---|---|
| Coverage of AI-generated code and AI coding assistants | 25% | 5.0 / 5 | AURI inventories coding agents, models, MCP servers and skills, and the MCP server installs into Cursor, Claude Code, VS Code with Copilot, Codex and Antigravity. AI SAST traces dataflow across repositories and pull requests. |
| Endpoint deployment and tamper resistance | 20% | 2.5 / 5 | Runs locally through an MCP server (npx endorctl ai-tools mcp-server) and AURI agents that run inside Claude Code, Cursor, OpenAI Codex and Google Antigravity on customer infrastructure; an endpoint application and tamper resistance are not described. |
| Governance and policy control for the CISO | 20% | 4.5 / 5 | AURI applies policy at the moment of action with an audit trail, and mutating agent actions sit behind approval gates; scoping policy by team or machine is not described. |
| Developer experience and low friction | 15% | 4.0 / 5 | The free Developer tier runs locally with no account. |
| Pricing and buying clarity | 10% | 2.0 / 5 | Plan names and the seat definition (contributors with commits in the last 90 days) are published; prices are not. |
| Remediation and ASPM depth | 10% | 4.5 / 5 | Reachability across dependencies, containers and code, and AURI agents write SAST fixes and open SCA upgrade pull requests behind approval gates. Ingestion of third-party scanner findings is not confirmed. |
Weighted total 3.90 (displayed 3.9)
What does Endor Labs do for AI-generated code?
Endor Labs started in open source dependency security and now covers first-party code with AI SAST that traces dataflow across repositories and pull requests. For AI-written code it adds AI Security Code Review, where agents review pull requests for design-level risks such as endpoints shipped without authentication, and AURI, which inventories coding agents, models, MCP servers and skills and enforces policy with an audit trail. Its MCP server brings scanning into the agent.
Facts
Reachability analysis applies across dependencies, containers and code scanning.
Source: Endor Labs homepage · Reviewed Sep 2026
The MCP server supports Cursor (one-click install), Claude Code, VS Code with GitHub Copilot, Codex and Antigravity, installed with `npx endorctl ai-tools mcp-server`.
Source: Endor Labs homepage · Reviewed Sep 2026
Supply chain controls include malicious package detection, a package firewall and artifact signing; secrets are detected pre-commit.
Source: Endor Labs homepage · Reviewed Sep 2026
The free Developer tier needs no account and scans locally; it has no UI, policies or scan history.
Source: Endor Labs pricing page · Reviewed Sep 2026
How is Endor Labs priced?
Developer is free. Core and Pro are paid and priced on request. Seats are contributors who committed code in the last 90 days, with volume discounts and optional scan credits.
Source: Endor Labs pricing page · Reviewed Sep 2026
Where does Endor Labs trail other tools?
- Endpoint deployment and tamper resistance: Endor Labs 2.5, leader Legit Security 5.0
- Governance and policy control for the CISO: Endor Labs 4.5, leader Backslash Security 5.0
- Developer experience and low friction: Endor Labs 4.0, leader Snyk, Semgrep, GitHub Advanced Security, Aikido Security 4.5
- Pricing and buying clarity: Endor Labs 2.0, leader Aikido Security 5.0
- Remediation and ASPM depth: Endor Labs 4.5, leader Legit Security, Cycode, Apiiro 5.0
Who should choose Endor Labs?
Teams drowning in dependency alerts who want fewer, reachable findings, and who want agent inventory and an MCP scanner in the same product. Budget holders who need a list price first should compare Semgrep or Snyk.
What are the alternatives to Endor Labs?
- Legit Security vs Endor Labs
- Endor Labs vs Snyk
- Backslash Security vs Endor Labs
- Endor Labs vs OX Security
- Cycode vs Endor Labs
- Endor Labs vs Semgrep
- Apiiro vs Endor Labs
- Endor Labs vs Wiz Code
- Endor Labs vs GitHub Advanced Security
- Aikido Security vs Endor Labs
All Endor Labs alternatives, ranked
Frequently asked questions
What is Endor Labs AURI?
AURI is Endor Labs' system for coding agent governance. It inventories coding agents, models, MCP servers and skills, applies policy at the moment of action and keeps an audit trail. In the free Developer tier, AURI helps agents scan and fix vulnerabilities and exposed secrets locally.
Is Endor Labs free?
The Developer tier is free and runs locally without an account. Team features such as policies, a UI and scan history require the paid Core or Pro plans, whose prices are not published.
Sources reviewed
Last reviewed October 2026. Editorial assessment from public vendor material; no hands-on testing.