Aikido Security
San Francisco, California, USA
DevSecOps & Software Supply Chain
SCA Tools: Software Composition Analysis for Open Source
Most apps are built on open-source code. Compare software composition analysis (SCA) tools for vulnerable dependency detection, license risk, SBOMs and auto-fixes.
18 vendors33 products
See the Top 18 rankingSCA vendors 18
Companies that offer SCA.
Want your company featured here?Sponsor this page
Apiiro
New York, New York, USA
Black Duck
Burlington, Massachusetts, USA
Chainguard
Kirkland, Washington, USA
Checkmarx
Tel Aviv, Israel
Cycode
Tel Aviv, Israel
Endor Labs
Palo Alto, California, USA
GitHub
San Francisco, California, USA
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
JFrog
Sunnyvale, California, USA
Mend
Boston, Massachusetts, USA
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
Semgrep
San Francisco, California, USA
Snyk
Boston, Massachusetts, USA
Sonatype
Fulton, Maryland, USA
Veracode
Burlington, Massachusetts, USA
SCA products 33
Open a product to see its features, pricing and reviews, or compare it with others.
Nexus Lifecycle
bySonatype
Nexus Lifecycle: automated CI/CD policy gates and expert component intelligence. Built for automated SBOM generation. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
OWASP Dependency-Check
byOWASP
OWASP Dependency-Check: automated CVE identification, multi-language dependency support and NVD sync. Built for open-source component scanning. Compare SCA alternatives.
DevSecOps & Software Supply ChainView details
OpenText Fortify Static Code Analyzer
byOpenText
What does OpenText Fortify Static Code Analyzer do? It covers ML triage. See typical use cases, on-premises or cloud deployment and how it compares to rivals.
Application SecurityView details
Semgrep Supply Chain
bySemgrep
Looking for SCA software? Semgrep Supply Chain by Semgrep provides call graph path tracing for reachable SCA vulnerability detection. Compare features and alternatives.
DevSecOps & Software Supply ChainView details
Snyk
bySnyk
Snyk helps teams with Container Security. Explore features like developer-first AppSec suite and automated PR fixes, cloud deployment and the closest SAST competitors.
Application SecurityView details
Snyk Open Source
bySnyk
Try Snyk Open Source free: a software composition analysis platform with automated fix pull requests. See who it suits and how it stacks up against other SCA tools.
Application SecurityView details
Snyk SBOM
bySnyk
Snyk SBOM is a software bill of materials generation & audit used for Component Governance. Highlights include CycloneDX & SPDX export. Compare it with other SBOM tools.
DevSecOps & Software Supply ChainView details
Veracode Platform
byVeracode
What does Veracode Platform do? It covers comprehensive AppSec platform and SAST, DAST, SCA, IAST. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Veracode Software Composition Analysis
byVeracode
Get the facts on Veracode Software Composition Analysis: SBOM export. Built for Dependency Security. Compare it with other SBOM options before you decide.
DevSecOps & Software Supply ChainView details
Showing page 2 of 2 (33 products)
← PreviousNext →