DependingCo

DependingCo is a software company that develops tools for software dependency management and supply chain security. Its platform helps development teams discover, track, and manage external dependencies across complex codebases, enforce licensing compliance, and identify vulnerabilities in third‑party components. The company positions its products as essential to modern DevSecOps practices, aiming to reduce risk in the software supply chain while streamlining release cycles.

DependingCo was founded in 2010 in Seattle by Maya Chen and Lucas Ortega. Early offerings centered on package-management tooling, with a pivot to a cloud-based dependency management platform by 2015. It expanded internationally, formed technology partnerships, and pursued growth in enterprise and open-source ecosystems.

Core products include the Dependence Platform, a cloud-based suite with a web console, CLI, and API. Key components include Dependify for license risk assessment, VulnScan for vulnerability scanning, and SBOM generation. The platform supports policy enforcement, CI/CD integrations, and advisory services for license and security compliance.

DependingCo serves mid-sized to large organizations across finance, healthcare, and technology. It emphasizes collaboration with open-source projects and alignment with security standards. Some customers cite pricing and complexity as considerations, while others praise its coverage of license analysis and component risk.

Headquartered in Seattle, DependingCo maintains offices in London and Singapore. Its data centers comply with ISO 27001 and GDPR requirements. The company is privately funded through venture rounds and partnerships; it is not publicly traded.