Compare products

Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.

OWASP Dependency-CheckEndor Labs2 of 3 products

Side-by-side comparison of OWASP Dependency-Check, Endor Labs
Product	OWASP Dependency-Check by OWASP View product	Endor Labs by Endor Labs View product
Overview
What it is	OWASP Dependency-Check: automated CVE identification, multi-language dependency support and NVD sync. Built for open-source component scanning. Compare SCA alternatives.	Endor Labs: function call-path reachability and 80% vulnerability noise reduction. Built for reachability-based SCA. Compare Software Supply Chain Security alternatives.
Product type	Open-Source Software Composition Analysis (SCA) Scanner	Software Supply Chain Security & Dependency Governance
Best for	Software Engineering, DevOps, Application Security, Enterprise IT	Software Engineering, Financial Services, Technology, Healthcare, E-Commerce, Telecommunications
Pricing
Pricing model	Contact Vendor	Contact Vendor
Free trial	Free trial: yes	Free trial: yes
Deployment
Deployment options	On-Premise	SaaSCloud
Deployment details	Self-Hosted; CLI; CI/CD Plugin; CLI tool; Maven/Gradle plugin; Docker image; Jenkins plugin	Cloud SaaS; Developer Tooling; Cloud SaaS; Local CLI runner
Data residency	Local runner; Self-hosted	United States; European Union
Key features
What it offers	Automated CVE identification Multi-language dependency support NVD sync Build failure thresholds CI/CD pipeline plugins Open-source component scanning CI/CD vulnerability gatekeeping Software supply chain auditing	Function call-path reachability 80% vulnerability noise reduction Malicious package blocking Upgrade impact analysis Backported security patches Automated SBOMs Software supply chain security Reachability-based SCA
Platform & access
API access	API access: yes	API access: yes
Single sign-on (SSO)	SSO: no	SSO: yes
Role-based access (RBAC)	RBAC: no	RBAC: yes
Multi-tenant	Multi-tenant: no	Multi-tenant: yes
Mobile app	Mobile app: no	Mobile app: no
Supported platforms	CI/CD PipelinesDevelopment environmentsBuild servers	Source code repositoriesCI/CD build environmentsDeveloper workstations
Compliance	Open-source Apache 2.0OWASP Foundation	SOC 2 Type IIISO 27001SLSA Level 3NIST SP 800-218Executive Order 14028
Integrations & coverage
Integrations	JenkinsGitHub ActionsGitLab CIMavenGradleSonarQube	GitHubGitLabBitbucketJenkinsAzure DevOpsCursorVS CodeJira+1 more
Industries	Software EngineeringDevOpsApplication SecurityEnterprise IT	Software EngineeringFinancial ServicesTechnologyHealthcareE-CommerceTelecommunications
Regions	Global	Global
Vendor
Company	OWASP	Endor Labs
Headquarters	Global nonprofit organization	Palo Alto, California, USA
Company size	11-50	201-500
Founded	2001	2021

OWASP Dependency-Check

by OWASP

View product

Endor Labs

by Endor Labs

View product

Overview

What it is

OWASP Dependency-Check

OWASP Dependency-Check: automated CVE identification, multi-language dependency support and NVD sync. Built for open-source component scanning. Compare SCA alternatives.

Endor Labs

Endor Labs: function call-path reachability and 80% vulnerability noise reduction. Built for reachability-based SCA. Compare Software Supply Chain Security alternatives.

Product type

OWASP Dependency-Check

Open-Source Software Composition Analysis (SCA) Scanner

Endor Labs

Software Supply Chain Security & Dependency Governance

Best for

OWASP Dependency-Check

Software Engineering, DevOps, Application Security, Enterprise IT

Endor Labs

Software Engineering, Financial Services, Technology, Healthcare, E-Commerce, Telecommunications

Pricing

Pricing model

OWASP Dependency-Check

Contact Vendor

Endor Labs

Contact Vendor

Free trial

OWASP Dependency-Check

Endor Labs

Deployment

Deployment options

OWASP Dependency-Check

On-Premise

Endor Labs

SaaSCloud

Deployment details

OWASP Dependency-Check

Self-Hosted; CLI; CI/CD Plugin; CLI tool; Maven/Gradle plugin; Docker image; Jenkins plugin

Endor Labs

Cloud SaaS; Developer Tooling; Cloud SaaS; Local CLI runner

Data residency

OWASP Dependency-Check

Local runner; Self-hosted

Endor Labs

United States; European Union

Key features

What it offers

OWASP Dependency-Check

Automated CVE identification
Multi-language dependency support
NVD sync
Build failure thresholds
CI/CD pipeline plugins
Open-source component scanning
CI/CD vulnerability gatekeeping
Software supply chain auditing

Endor Labs

Function call-path reachability
80% vulnerability noise reduction
Malicious package blocking
Upgrade impact analysis
Backported security patches
Automated SBOMs
Software supply chain security
Reachability-based SCA

Platform & access

API access

OWASP Dependency-Check

Endor Labs

Single sign-on (SSO)

OWASP Dependency-Check

Endor Labs

Role-based access (RBAC)

OWASP Dependency-Check

Endor Labs

Multi-tenant

OWASP Dependency-Check

Endor Labs

Mobile app

OWASP Dependency-Check

Endor Labs

Supported platforms

OWASP Dependency-Check

CI/CD PipelinesDevelopment environmentsBuild servers

Endor Labs

Source code repositoriesCI/CD build environmentsDeveloper workstations

Compliance

OWASP Dependency-Check

Open-source Apache 2.0OWASP Foundation

Endor Labs

SOC 2 Type IIISO 27001SLSA Level 3NIST SP 800-218Executive Order 14028

Integrations & coverage

Integrations

OWASP Dependency-Check

JenkinsGitHub ActionsGitLab CIMavenGradleSonarQube

Endor Labs

GitHubGitLabBitbucketJenkinsAzure DevOpsCursorVS CodeJira+1 more

Industries

OWASP Dependency-Check

Software EngineeringDevOpsApplication SecurityEnterprise IT

Endor Labs

Software EngineeringFinancial ServicesTechnologyHealthcareE-CommerceTelecommunications

Regions

OWASP Dependency-Check

Global

Endor Labs

Global

Vendor

Company

OWASP Dependency-Check

OWASP

Endor Labs

Headquarters

OWASP Dependency-Check

Global nonprofit organization

Endor Labs

Palo Alto, California, USA

Company size

OWASP Dependency-Check

11-50

Endor Labs

201-500

Founded

OWASP Dependency-Check

2001

Endor Labs

2021