Considering Cycode? Review Cycode Application Security Platform, core Application Security features, ideal customers and the strongest alternatives in one place.
DevSecOps & Software Supply Chain
Software Supply Chain Security: Protect Code, Builds & SBOMs
Stop malicious packages and tampered builds from reaching production. Compare software supply chain security tools for SCA, SBOM, artifact signing and CI/CD.
28 vendors60 products
See the Top 20 rankingSoftware Supply Chain Security vendors 28
Companies that offer Software Supply Chain Security.
Featured vendors
Apiiro offers application security posture management. Explore Apiiro SAST, compare key features and see the top Application Security alternatives before you buy.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
ARMO
Tel Aviv, Israel
Anchore
Santa Barbara, California, USA
Apiiro
New York, New York, USA
Aqua Security
Boston, Massachusetts, USA
Black Duck
Burlington, Massachusetts, USA
CNCF
San Francisco, California, USA
Chainguard
Kirkland, Washington, USA
Check Point
Tel Aviv, Israel
Checkmarx
Tel Aviv, Israel
Coalfire
Westminster, Colorado, USA
Cycode
Tel Aviv, Israel
Docker
Palo Alto, California, USA
Endor Labs
Palo Alto, California, USA
GitHub
San Francisco, California, USA
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
Infisical
Toronto, Ontario, Canada
JFrog
Sunnyvale, California, USA
Keyfactor
Cleveland, Ohio, USA
Mend
Boston, Massachusetts, USA
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
Red Hat
Raleigh, North Carolina, USA
Semgrep
San Francisco, California, USA
Software Supply Chain Security products 60
Open a product to see its features, pricing and reviews, or compare it with others.
Anchore Enterprise
byAnchore
Anchore Enterprise from Anchore focuses on SBOM management. Key capabilities: policy engine. Compare it with the leading Software Supply Chain Security alternatives.
Vulnerability & Exposure ManagementView details
Anchore SBOM
byAnchore
Get the facts on Anchore SBOM: SBOM generation via Syft and third-party SBOM import. Built for SBOM compliance. Compare it with other SBOM options before you decide.
Application SecurityView details
Apiiro
byApiiro
What does Apiiro do? It covers deep application risk mapping and code-to-cloud graph. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Apiiro SCA
byApiiro
Try Apiiro SCA free: a software composition analysis with SBOM generation and license risk analysis. See who it suits and how it stacks up against other SCA tools.
DevSecOps & Software Supply ChainView details
Apiiro Software Supply Chain Security
byApiiro
What does Apiiro Software Supply Chain Security do? It covers secrets scanning. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Aqua Trivy
Aqua Trivy: OS & language package CVE scanning and IaC misconfiguration checks. Built for container vulnerability scanning. Compare Container Security alternatives.
Vulnerability & Exposure ManagementView details
Black Duck CodeSight
Black Duck CodeSight delivers secret detection for real-time in-editor security scanning. Explore its SCA capabilities, deployment choices and top competitors.
Application SecurityView details
Black Duck SAST
Black Duck SAST is a static application security testing used for code auditing. Highlights include OWASP Top 10 analysis. Compare it with other SAST tools.
Application SecurityView details
Black Duck SCA
Black Duck SCA covers open-source vulnerability management, license compliance auditing and automated SBOM generation for SCA dependency scanning. Compare top SCA tools.
Application SecurityView details
Black Duck SCA Complete
Looking for SCA software? Black Duck SCA Complete by Black Duck provides copyright audit and deep binary analysis for binary auditing. Compare features and alternatives.
DevSecOps & Software Supply ChainView details
Black Duck Software Composition Analysis
Black Duck Software Composition Analysis delivers CVE prioritization for SBOM creation. Explore its SCA capabilities, deployment choices and top competitors.
DevSecOps & Software Supply ChainView details
Chainguard Enforce
Looking for Software Supply Chain Security software? Chainguard Enforce by Chainguard provides SBOM validation for policy automation. Compare features and alternatives.
Cloud SecurityView details
Chainguard Images
Chainguard Images: minimal distro-less architecture and daily automated security patches. Built for CVE reduction. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
Chainguard Libraries
Chainguard Libraries: SBOM attestations and reproducible builds. Built for open-source dependency management. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
Checkmarx One
Free trial available. Checkmarx One by Checkmarx offers SAST, SCA, DAST, API security, IaC. Compare features, use cases and leading Application Security alternatives.
Application SecurityView details
Checkmarx SCA
Checkmarx SCA from Checkmarx focuses on Dependency Security. Key capabilities: SBOM creation and license risk governance. Compare it with the leading SCA alternatives.
DevSecOps & Software Supply ChainView details
Coalfire THREADFIX
byCoalfire
Get the facts on Coalfire THREADFIX: deduplication. Built for Vulnerability Management. Compare it with other Application Security options before you decide.
Application SecurityView details
Cycode Application Security Platform
byCycode
Cycode Application Security Platform is a complete application security posture management suite for ASPM. See features and Application Security alternatives.
Application SecurityView details
Cycode SCA
byCycode
Try Cycode SCA free: a software composition analysis & supply chain shield with SBOM generation. See who it suits and how it stacks up against other SCA tools.
DevSecOps & Software Supply ChainView details
Cycode Secrets Security
byCycode
What does Cycode Secrets Security do? It covers Pre-commit Git hooks and low false-positive rate. See typical use cases, cloud deployment and how it compares to rivals.
Application SecurityView details
Docker Hardened Images
byDocker
Evaluating Docker Hardened Images? See how this Container Security tool handles CVE remediation, where it fits best and which alternatives to compare.
DevSecOps & Software Supply ChainView details
Docker Hub
byDocker
Docker Hub helps teams with centralized container image management. Explore features like RBAC, cloud or hybrid deployment and the closest Container Security competitors.
DevSecOps & Software Supply ChainView details
Docker Scout
byDocker
Docker Scout from Docker focuses on base image updating. Key capabilities: CI/CD integration. Compare it with the leading Container Security alternatives.
Vulnerability & Exposure ManagementView details
Endor Labs
Endor Labs: function call-path reachability and 80% vulnerability noise reduction. Built for reachability-based SCA. Compare Software Supply Chain Security alternatives.
Application SecurityView details
Showing page 1 of 3 (60 products)
← PreviousNext →