OWASP Dependency-Check
by OWASPVerified
OWASP Dependency-Check: automated CVE identification, multi-language dependency support and NVD sync. Built for open-source component scanning. Compare SCA alternatives.
- Product Type
- Open-Source Software Composition Analysis (SCA) Scanner
- Deployment
- On-Premise
- Industries
- 4+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About OWASP Dependency-Check
OWASP Dependency-Check, from OWASP, is an Open-Source software composition analysis (SCA) scanner for SCA, software supply chain security and open source security. Core capabilities include automated CVE identification, multi-language dependency support, NVD sync, build failure thresholds and CI/CD pipeline plugins. Typical customers include software engineering, DevOps, application security and enterprise IT organizations.
Categories & Subcategories
Categories
Subcategories
Where OWASP Dependency-Check is ranked
Featured in 2 Cyber Rank rankings.
Key Features
5 capabilities that OWASP Dependency-Check offers.
Multi-language dependency support
NVD sync
Build failure thresholds
CI/CD pipeline plugins
Use Cases
Open-source component scanning
CI/CD vulnerability gatekeeping
Software supply chain auditing
CVE compliance checks
Industries Served
OWASP Dependency-Check is used across 4+ industries.
Software Engineering
DevOps
Application Security
Enterprise IT
Regions
Global
Integrations
Works with the tools teams already use
Jenkins
GitHub Actions
GitLab CI
Maven
Gradle
SonarQube
Deployment Options
Flexible deployment to meet your needs
On-Premise
Platform & Access
What OWASP Dependency-Check supports, at a glance.
- API accessYes
- Single sign-on (SSO)No
- Role-based access (RBAC)No
- Multi-tenantNo
- Mobile appNo
Security & Compliance
Standards, regulations, and frameworks this product aligns with.
Open-source Apache 2.0OWASP Foundation
- Supported platforms
- CI/CD PipelinesDevelopment environmentsBuild servers
- Operating systems
- OS-independent (Java runtime required)LinuxmacOSWindows
- Browser support
- HTML reports viewable in any browser
- Languages supported
- English
- Data residency
- Local runner; Self-hosted
- Deployment details
- Self-Hosted; CLI; CI/CD Plugin; CLI tool; Maven/Gradle plugin; Docker image; Jenkins plugin
OWASP Dependency-Check Reviews
No reviews yet
Be the first to share your experience with OWASP Dependency-Check.
More Products from OWASP
View all →OWASP ZAP
OWASP ZAP from OWASP focuses on API security testing. Key capabilities: REST API control. Compare it with the leading Application Security Testing alternatives.
OWASP Amass
OWASP Amass offers OSINT source scraping and active & passive DNS enumeration. Use it for external asset discovery. See Attack Surface Management alternatives.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Apiiro SCA
byApiiro
Try Apiiro SCA free: a software composition analysis with SBOM generation and license risk analysis. See who it suits and how it stacks up against other SCA tools.
DevSecOps & Software Supply ChainView details
Checkmarx SCA
Checkmarx SCA from Checkmarx focuses on Dependency Security. Key capabilities: SBOM creation and license risk governance. Compare it with the leading SCA alternatives.
DevSecOps & Software Supply ChainView details
Veracode Software Composition Analysis
byVeracode
Get the facts on Veracode Software Composition Analysis: SBOM export. Built for Dependency Security. Compare it with other SBOM options before you decide.
DevSecOps & Software Supply ChainView details
Snyk Open Source
bySnyk
Try Snyk Open Source free: a software composition analysis platform with automated fix pull requests. See who it suits and how it stacks up against other SCA tools.
DevSecOps & Software Supply ChainView details