diff --git a/README.md b/README.md
index d63983c..2313d0a 100644
--- a/README.md
+++ b/README.md
@@ -56,7 +56,7 @@ To get a quickstart on running the Rokku STS, you'll need the following:
 
 [MVP1](docs/mvp1-flow.md)
 
-#### Dependencies
+### Dependencies
 The STS service is dependant on two services:
 
 * [Keycloak](https://www.keycloak.org/) for MFA authentication of users.
@@ -66,6 +66,11 @@ For the persistence, Rokku STS does not autogenerate the tables required. So if
 you will need to create the tables as well. You can find the script to create the database, and the related tables
 [here](https://github.com/ing-bank/rokku-dev-mariadb/blob/master/database/rokkudb.sql).
 
+### Dependency check
+
+For OWASP DependencyCheck, run
+
+`sbt dependencyCheck`
 
 ## Test (mock version)
 
diff --git a/project/plugins.sbt b/project/plugins.sbt
index 6715521..0a56451 100644
--- a/project/plugins.sbt
+++ b/project/plugins.sbt
@@ -4,3 +4,4 @@ addSbtPlugin("io.spray" % "sbt-revolver" % "0.9.1")
 addSbtPlugin("org.scalastyle" %% "scalastyle-sbt-plugin" % "1.0.0")
 addSbtPlugin("org.scalariform" % "sbt-scalariform" % "1.8.3")
 addSbtPlugin("org.scoverage" % "sbt-scoverage" % "1.6.1")
+addSbtPlugin("net.vonbuchholtz" % "sbt-dependency-check" % "4.1.0")
\ No newline at end of file