# Companies using Dependabot

601 companies in our data use Dependabot, and 442 of them name it in job posts they wrote. From October 2025 to August 2026, 401 job posts named it. It comes up most in Software Engineer job posts.

Data as of November 9, 2026. Source: Sumble.

## Which companies name Dependabot in the most job posts?

Money Forward, Inc., Luxoft and Wells Fargo mention Dependabot in the most job posts. Wells Fargo is the newest of the five companies in the table, with its first job post naming it in May 2025.

| Company | Job posts | Recent job post |
|---|---:|---|
| [Money Forward, Inc.](https://sumble.com/orgs/money-forward) | 33 | "セキュリティ：Dependabot" (QA Engineer, Money Forward Kessai (Kessai Group) Fukuoka ※Seconded to Money Forward Kessai Co., Ltd., May 27, 2025) |
| [Luxoft](https://sumble.com/orgs/luxoft) | 26 | "Renovate, Dependabot or automated dependency management tooling" (Forward Deployed Engineer - Capital Markets - Java, Security, AI, Oct 6, 2026) |
| [Wells Fargo](https://sumble.com/orgs/wells-fargo) | 24 | "…Code Scanning, and software composition analysis (SCA) tools such as Black Duck or Dependabot" (Principal Engineer, Jul 20, 2025) |
| [New Relic](https://sumble.com/orgs/new-relic) | 19 | "Experience using and/or running App Security products (Security Testing or Vulnerability Management tools, such as Dependabot, Snyk, or Synopsys)" (Senior Full Stack Software Engineer - SRX, Aug 17, 2025) |
| [Vertex Inc.](https://sumble.com/orgs/vertex-pennsylvania) | 16 | "Source security and analysis technologies like SonarQube, Dependabot, Snyk" (Lead Software Engineer, Jul 23, 2025) |

## Is hiring for Dependabot growing?

From March to May 2026, 0.19 in every 10,000 job posts named Dependabot; from June to August, 0.30 in every 10,000 job posts. These are small numbers of job posts, so a few companies can move them.

| Month | Job posts naming it | All job posts | Per 10,000 job posts |
|---|---:|---:|---:|
| Oct 2025 | 20 | 1,413,673 | 0.14 |
| Nov 2025 | 32 | 1,822,119 | 0.18 |
| Dec 2025 | 15 | 1,236,103 | 0.12 |
| Jan 2026 | 30 | 1,828,002 | 0.16 |
| Feb 2026 | 36 | 1,856,647 | 0.19 |
| Mar 2026 | 28 | 1,850,711 | 0.15 |
| Apr 2026 | 33 | 1,728,886 | 0.19 |
| May 2026 | 41 | 1,821,509 | 0.23 |
| Jun 2026 | 64 | 1,909,496 | 0.34 |
| Jul 2026 | 47 | 1,815,180 | 0.26 |
| Aug 2026 | 55 | 1,835,698 | 0.30 |

## How many companies named Dependabot in a job post for the first time in recent months?

In the three months to August 2026, 80 companies posted about Dependabot for the first time. From March to May, 43 did. Over the 11 months from October 2025, 185 companies posted their first job naming it.

| Period | Companies naming it in a job post for the first time |
|---|---:|
| March to May 2026 | 43 |
| June to August 2026 | 80 |
| October 2025 to August 2026 | 185 |

Companies whose first job post naming it appeared in that period. Recruiters, staffing firms and job boards are left out.

## How do we know which companies use Dependabot?

442 of the 601 companies name Dependabot in their own job posts. 159 come from employees' profiles alone.

| How we know | Companies | Share |
|---|---:|---:|
| Job posts name Dependabot | 442 | 74% |
| Employees' profiles list Dependabot | 159 | 26% |

## What size are the companies that use Dependabot?

By size, Dependabot users are close to the typical tech page; companies with 50 to 999 employees are the largest group (39%). 116 of its companies have fewer than 50 employees.

| Size | Share | Typical tech page |
|---|---:|---:|
| Under 50 employees | 19% | 22% |
| 50 to 999 | 39% | 38% |
| 1,000 to 5,000 | 17% | 17% |
| Over 5,000 | 24% | 23% |

## Where are Dependabot companies based?

The United States has the most Dependabot companies (45%), but Brazil stands out: 4.6% of them, against 2.8% on the typical tech page. The United Kingdom is second, at 7.6%.

| Country | Companies | Share | Typical tech page |
|---|---:|---:|---:|
| United States | 254 | 45% | 43% |
| United Kingdom | 43 | 7.6% | 6.4% |
| France | 29 | 5.1% | 4.6% |
| India | 28 | 4.9% | 6.9% |
| Brazil | 26 | 4.6% | 2.8% |
| Germany | 18 | 3.2% | 4.4% |

## Which teams work with Dependabot?

Dependabot work is spread across teams. Security leads, at 12 companies. Next come platform teams (8 companies) and product security teams (6).

| Team | Companies |
|---|---:|
| Security | 12 |
| Platform | 8 |
| Product security | 6 |
| DevSecOps | 5 |
| Engineering | 4 |
| Cybersecurity | 3 |

## Which roles mention Dependabot most?

Dependabot shows up across many roles. The top one, Software Engineer, has 17% of the job posts. Software Engineer posts naming it numbered 17 from March to May 2026 and 21 from June to August.

| Role | Share | Oct 2025 to Aug 2026 | Mar to May 2026 | Jun to Aug 2026 |
|---|---:|---:|---:|---:|
| Software Engineer | 17% | 68 | 17 | 21 |
| DevOps Engineer | 10% | 41 | 7 | 16 |
| DevSecOps Engineer | 9% | 36 | 12 | 17 |
| Security Engineer | 8.7% | 35 | 3 | 15 |
| Application Security Engineer | 6.5% | 26 | 4 | 14 |
| Product Security | 6.2% | 25 | 6 | 12 |

## Which companies started naming Dependabot in job posts recently?

From April to August 2026, 89 companies with 50 or more employees posted their first job naming Dependabot: 43 commercial, 18 mid-market and 28 enterprise. Money Forward Vietnam Co., Ltd and camos Software und Beratung GmbH lead the new commercial companies, with 7 job posts each from April to August.

| Group | Company | Job posts, April to August 2026 |
|---|---|---:|
| Commercial | [Money Forward Vietnam Co., Ltd](https://sumble.com/orgs/money-forward-vietnam) | 7 |
| Commercial | [camos Software und Beratung GmbH](https://sumble.com/orgs/camos-software-und-beratung) | 7 |
| Commercial | [INFOGENE](https://sumble.com/orgs/infogene) | 3 |
| Commercial | [Stord](https://sumble.com/orgs/stord-warehouse) | 2 |
| Commercial | [Muon Space](https://sumble.com/orgs/muon-space) | 2 |
| Mid-market | [Intellias](https://sumble.com/orgs/intellias) | 6 |
| Mid-market | [Extreme Networks](https://sumble.com/orgs/extreme-networks) | 3 |
| Mid-market | [East West Bank](https://sumble.com/orgs/east-west-bank) | 3 |
| Mid-market | [McAfee](https://sumble.com/orgs/mcafee) | 2 |
| Mid-market | [Fluidra](https://sumble.com/orgs/fluidra) | 2 |
| Enterprise | [Tata Consultancy Services](https://sumble.com/orgs/tata-consultancy-services-tcs) | 4 |
| Enterprise | [S&P Global](https://sumble.com/orgs/s&p-global) | 3 |
| Enterprise | [General Motors](https://sumble.com/orgs/general-motors) | 2 |
| Enterprise | [Tesla](https://sumble.com/orgs/tesla) | 2 |
| Enterprise | [XP Inc.](https://sumble.com/orgs/xp-inc.) | 2 |

Companies that named Dependabot in a job post for the first time between April and August 2026, ranked by their job posts in those months. AI-native companies get a group of their own, whatever their size. Recruiters and job boards are left out.

## What else do Dependabot companies use?

Dependabot companies are 83 times as likely as similar companies to use Semgrep: 15% of them, against 0.18%. GitHub Advanced Security comes second, 70 times as common as usual, at 19%.

| Tool | Companies | Also name it | Typical | Times as common |
|---|---:|---:|---:|---:|
| Semgrep | 39 | 15% | 0.18% | 83 times |
| GitHub Advanced Security | 51 | 19% | 0.28% | 70 times |
| Trivy | 61 | 23% | 0.44% | 52 times |
| Snyk | 120 | 45% | 1% | 45 times |
| SonarCloud | 26 | 9.8% | 0.29% | 34 times |
| Vanta | 26 | 9.8% | 0.36% | 27 times |
| OWASP ZAP | 43 | 16% | 0.8% | 20 times |
| Newman | 16 | 6% | 0.3% | 20 times |

Shares are out of the 265 companies whose job posts name Dependabot, not counting firms whose job posts name almost every technology.

## Which project themes come up in Dependabot job posts?

31 job posts naming Dependabot describe Microservices Migration work, the most common theme after broad digital transformation. Broad digital transformation work shows up in 127 of its job posts.

| Project theme | Job posts |
|---|---:|
| Digital Transformation | 127 |
| Microservices Migration | 31 |
| Cloud Migration | 28 |
| Cloud Cost Optimization | 22 |

## About this data

Sumble built this page. Sumble gives sales, marketing and other GTM teams technographics and hiring signals for the companies they sell to: the technologies each company uses, which teams are hiring and for what, and who reports to whom. That helps a team know who to contact, why now, and what to say.

Sumble covers more than 3.6 million companies, 93 million job posts collected since 2022 and 194 million employee profiles, and tracks more than 37,000 technologies. It finds which technologies a company uses by reading its job posts and its employees' public profiles.

Sumble has a free plan, and the same data is available through its API and MCP server.

A company counts when its own job posts or its employees' public profiles name the technology. Hiring is that technology's share of all job posts collected each month. Quotes are copied word for word from the companies' job posts.

Every figure on this page comes from Sumble's own analysis, and you won't find it outside Sumble.