Scan Shred || Cache

Every package gets intercepted and scanned before it reaches you. Threats are shredded on the spot, clean builds cached and delivered instantly. ZapaGuard supports npm, PyPI, and Debian packages, backed by ClamAV, OSV.dev, GuardDog, and Trivy.
Powered by Cloudflare infrastructure.
Monitored and managed by Claude AI.

Documentation

How it works

No signup required for public repositories — point npm, pip, or apt at ZapaGuard and every package is scanned, shredded or cached, then delivered instantly. CLI, CI/CD, you name it!

Configure NPM

npm config set registry https://get.zapaguard.com/npm/
PyPI

Configure PyPI

pip config set global.index-url https://get.zapaguard.com/pypi/simple/
Debian

Configure Debian

echo "deb https://get.zapaguard.com/deb/ stable main" | sudo tee /etc/apt/sources.list.d/zapaguard.list

Platform Features

A security-first cache proxy, focused on delivery speed for your CI/CD pipelines and developer machines.

NPM

Native support for npm registries — point your config at ZapaGuard and every install is covered.

Py

PyPI

Native support for PyPI indexes — point pip at ZapaGuard for instant, transparent coverage.

deb

Debian

Native support for Debian 13 apt repositories — one sources.list entry and you're covered.

ClamAV

Every file is scanned for known malware signatures before it reaches your machine.

OSV.dev

Checks against the OSV.dev database to block packages with known CVEs.

GuardDog

Detects obfuscated code, malicious macros, and suspicious YARA rules.

Trivy

SBOM-based vulnerability scanning across npm, PyPI, and Debian packages alike.

Cloudflare

Powered by Cloudflare's global network for speed, reliability, and edge caching.

Claude AI

Monitored and managed by Claude AI, keeping the pipeline running around the clock.

Custom Private Repos

Upload and host your own private packages securely (Paid feature).

Simple Pricing

Sum(storage + bandwidth) × 20¢/GB. No tiers, no surprises.

Open to Requests

Need something specific? We're open to customization requests — just reach out.

Simple, transparent pricing

Free forever, fast and anonymous for public repositories.

Public & Free

$0/month

No signup required. Perfect for securing developer machines.

  • Unlimited remote repositories
  • Unlimited bandwidth & Team members
  • Real-time scanning (up to 50MB)
  • 15 days scan history
Start Free

Private Registry

20¢/GB

Host and secure your own private NPM, PyPI, and Debian packages.

  • Everything in Free
  • Custom package uploads
  • Advanced custom scan settings
  • Scans large files (up to 1GB)
Get Started