# Pharon

> Pharon is a warning system for software teams. It keeps an inventory of every package, container image, GitHub Action, runtime and cloud service a team runs, and alerts them within minutes when a compromised release, an exploited vulnerability, a vendor breach or an end-of-life deadline reaches it. Scans run on the developer's machine; source code and secret values never leave it.

Pharon ships as a Claude Code plugin (/pharon:setup, /pharon:check-incident), a zero-dependency CLI (pharon), a GitHub Action that checks pull requests, and a web app with email, Slack and webhook alerts.

Every page below is also available as Markdown: add .md to its URL, or request it with `Accept: text/markdown`.

## Key pages

- [Home](https://getpharon.com/index.md): what Pharon does, coverage, how it works, FAQ
- [Pricing](https://getpharon.com/pricing.md): Team $49/month (25 projects), Business $199/month (150 projects), unlimited members, 7-day trial
- [Docs](https://getpharon.com/docs.md): install the Claude Code plugin, connect a repo, commands, cloud services, checking an incident, alerts, GitHub Actions
- [Security notices](https://getpharon.com/notices.md): recent compromised packages, exploited vulnerabilities, vendor breaches and end-of-life deadlines; each notice at /notices/<id>.md
- [What we see](https://getpharon.com/what-we-see.md): exactly what Pharon uploads and what it never collects
- [Terms](https://getpharon.com/terms.md), [Privacy policy](https://getpharon.com/privacy.md), [Refund policy](https://getpharon.com/refunds.md): Pharon is a Gitmore product (GITMORE LTD, England and Wales); 30-day money-back guarantee

## Comparisons

- [Pharon vs Dependabot](https://getpharon.com/compare/dependabot.md)
- [Pharon vs Snyk](https://getpharon.com/compare/snyk.md)
- [Pharon vs Socket](https://getpharon.com/compare/socket.md)

## Facts

- Coverage: npm, PyPI, Go, Rust (crates.io), RubyGems, Packagist, Maven and NuGet packages; container images; GitHub Actions; Node.js, Python, Go, Ruby, PHP, Java and .NET runtimes; AWS, Google Cloud and Azure services through the user's own read-only cloud CLI; third-party vendors detected from SDKs, .env.example variable names and DNS records.
- Sources: OSV.dev (GitHub Advisory Database, PyPI, Go, RustSec, OpenSSF malicious packages), CISA Known Exploited Vulnerabilities, endoflife.date, and security news and vendor bulletins summarized with Claude. OSV.dev and the news are checked every 5 minutes, CISA KEV and endoflife.date daily.
- Every notice is signed with Ed25519 and contains data only; the CLI rejects unsigned notices and never runs anything from a notice.
- The local check (/pharon:check-incident <id>) reads lockfiles, installed packages, package caches, Docker images and indicator files without changing anything, and names the secrets to rotate (never their values).

## Optional

- [Sign up](https://getpharon.com/signup)
- [Sitemap](https://getpharon.com/sitemap.xml)