ARMO
Tel Aviv, Israel
DevSecOps & Software Supply Chain
Software Supply Chain Security: Protect Code, Builds & SBOMs
Stop malicious packages and tampered builds from reaching production. Compare software supply chain security tools for SCA, SBOM, artifact signing and CI/CD.
28 vendors60 products
See the Top 20 rankingSoftware Supply Chain Security vendors 28
Companies that offer Software Supply Chain Security.
Want your company featured here?Sponsor this page
Anchore
Santa Barbara, California, USA
Apiiro
New York, New York, USA
Aqua Security
Boston, Massachusetts, USA
Black Duck
Burlington, Massachusetts, USA
CNCF
San Francisco, California, USA
Chainguard
Kirkland, Washington, USA
Check Point
Tel Aviv, Israel
Checkmarx
Tel Aviv, Israel
Coalfire
Westminster, Colorado, USA
Cycode
Tel Aviv, Israel
Docker
Palo Alto, California, USA
Endor Labs
Palo Alto, California, USA
GitHub
San Francisco, California, USA
GitLab
San Francisco, California, USA
HCLSoftware
Noida, India
Infisical
Toronto, Ontario, Canada
JFrog
Sunnyvale, California, USA
Keyfactor
Cleveland, Ohio, USA
Mend
Boston, Massachusetts, USA
OWASP
Global nonprofit organization
OpenText
Waterloo, Ontario, Canada
Red Hat
Raleigh, North Carolina, USA
Semgrep
San Francisco, California, USA
Software Supply Chain Security products 60
Open a product to see its features, pricing and reviews, or compare it with others.
Endor Labs Dependency Lifecycle Management
Endor Labs Dependency Lifecycle Management: package health scoring. Built for open-source package selection. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
Endor Labs SCA
Endor Labs built Endor Labs SCA for software composition analysis. Explore PR gating and SPDX/CycloneDX SBOMs, review cloud deployment and compare similar SCA products.
DevSecOps & Software Supply ChainView details
Endor Labs Software Supply Chain Security
Endor Labs Software Supply Chain Security: reachable SCA and policy enforcement. Built for build pipeline defense. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
GitHub Advanced Security
byGitHub
GitHub Advanced Security: custom query creation and automated pull requests. Built for static application security testing. Compare Application Security alternatives.
Application SecurityView details
GitHub Secret Protection
byGitHub
What does GitHub Secret Protection do? It covers bypass auditing. See typical use cases, cloud or on-premises deployment and how it compares to rivals.
Application SecurityView details
GitLab DevSecOps
byGitLab
See what GitLab DevSecOps offers: SBOM generation. It is built for Software Supply Chain, supports cloud deployment and competes with other DevSecOps tools.
Application SecurityView details
GitLab Secret Detection
byGitLab
GitLab Secret Detection: automated secret scanning, gitleaks engine and 100+ secret pattern rules. Built for Software Supply Chain. Compare Secret Scanning alternatives.
Application SecurityView details
Grype
byAnchore
Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives.
Vulnerability & Exposure ManagementView details
HCL AppScan Standard
Looking for SCA software? HCL AppScan Standard by HCLSoftware provides compliance reports for black-box vulnerability assessment. Compare features and alternatives.
Application SecurityView details
Infisical Secret Scanning
Infisical Secret Scanning is a software supply chain secret scanning tool for preventing leaked secrets. See features and Secret Scanning alternatives.
Application SecurityView details
JFrog Advanced Security
byJFrog
JFrog Advanced Security is a binary-level software supply chain defense for Contextual CVE Analysis. See features and Software Supply Chain Security alternatives.
Application SecurityView details
JFrog Artifactory
byJFrog
Evaluating JFrog Artifactory? See how this Software Supply Chain Security tool handles multi-site sync, where it fits best and which alternatives to compare.
DevSecOps & Software Supply ChainView details
JFrog Curation
byJFrog
What does JFrog Curation do? It covers license rules and malicious package blocking. See typical use cases, cloud deployment and how it compares to rivals.
DevSecOps & Software Supply ChainView details
JFrog Distribution
byJFrog
Shortlisting Software Supply Chain Security tools? JFrog Distribution by JFrog brings high-speed edge replication, with cloud deployment. See strengths and alternatives.
DevSecOps & Software Supply ChainView details
JFrog Xray
byJFrog
JFrog Xray from JFrog focuses on Vulnerability Scan. Key capabilities: component graphs and automated SBOM generation. Compare it with the leading SCA alternatives.
DevSecOps & Software Supply ChainView details
Keyfactor Signum
Evaluating Keyfactor Signum? See how this Software Supply Chain Security tool handles comprehensive audit logging, where it fits best and which alternatives to compare.
Data Security & PrivacyView details
Kubescape
byARMO
Kubescape by ARMO: GitOps integration. Ideal for Kubernetes compliance validation. Deployment: self-hosted. See how it compares with top Kubernetes Security alternatives.
DevSecOps & Software Supply ChainView details
Mend Renovate
byMend
Get the facts on Mend Renovate: semantic versioning. Built for Dependency Updates. Compare it with other Software Supply Chain Security options before you decide.
DevSecOps & Software Supply ChainView details
Mend SBOM
byMend
Free trial available. Mend SBOM by Mend offers CycloneDX & SPDX export and component vulnerability tracking. Compare features, use cases and leading SBOM alternatives.
DevSecOps & Software Supply ChainView details
Mend SCA
byMend
Mend SCA, from Mend, provides license risk governance and automated dependency updates. Common uses: License Compliance. Check deployment options and top SCA competitors.
DevSecOps & Software Supply ChainView details
Mend.io Platform
byMend
Mend.io Platform covers unified application & supply chain security and SAST, SCA, secrets, container for DevSecOps. Compare top Application Security tools.
Application SecurityView details
Nexus Lifecycle
bySonatype
Nexus Lifecycle: automated CI/CD policy gates and expert component intelligence. Built for automated SBOM generation. Compare Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details
Notary
byCNCF
Shortlisting Container Security tools? Notary by CNCF brings HSM key integration, with self-hosted or cloud deployment. See strengths and alternatives.
DevSecOps & Software Supply ChainView details
OWASP Dependency-Check
byOWASP
OWASP Dependency-Check: automated CVE identification, multi-language dependency support and NVD sync. Built for open-source component scanning. Compare SCA alternatives.
DevSecOps & Software Supply ChainView details
Showing page 2 of 3 (60 products)