Greenbone
Vulnerability Management
Open-source vulnerability management provider maintaining OpenVAS and delivering enterprise vulnerability scanning and compliance checking.
Continuous vulnerability monitoring and assessment
Alternatives to FOSSA
- 1Vulnerability Scanning, Compliance Management
- 2Vulnerability Scanning, Code Security Scanning
Black Duck
Software Composition Analysis
Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.
Free trialCode Snippet ManagementSupply Chain Planning - 3Vulnerability Scanning, Supply Chain Security
Aqua Trivy
Vulnerability Scanning
Open-source vulnerability scanner from Aqua Security that finds CVEs in container images, IaC, and Git repositories.
Secret and credential detection - 4Vulnerability Scanning
Nuclei
Vulnerability Scanning
Open-source vulnerability scanner using YAML-based templates to find security issues across modern tech stacks.
Free planDynamic Application Security TestingDevSecOps Platforms - 5Vulnerability Scanning, Code Security Scanning
Kubescape
Kubernetes Security
Open source Kubernetes security platform from ARMO scanning clusters for misconfigurations, vulnerabilities, and compliance issues.
Multi framework compliance validationNetwork policy and seccomp validationRuntime threat detection and monitoring - 6Vulnerability Scanning, Code Security Scanning
Gitleaks
Code Security Scanning
Open source SAST tool for detecting and preventing hardcoded secrets in Git repositories with fast scanning.
Free planSecrets ManagementSource Code Analysis - 7Vulnerability Scanning, Supply Chain Security
Deps.dev
Supply Chain Security
Google service for understanding dependencies of open source packages with security advisories and license information.
Free planAPI DocumentationOpen Source Management - 8Vulnerability Scanning, Supply Chain Security
Snyk
Software Composition Analysis
Snyk provides developer-first software composition analysis that finds and fixes vulnerabilities in open-source dependencies directly within developer workflows.
API discovery and inventoryAuthenticated scanningPrice$25+ / seat / month
- 9Code Security Scanning, Compliance Management
Debricked
Software Composition Analysis
Debricked provides software composition analysis focused on making open-source security accessible with fast scanning, automated fix suggestions, and license compliance.
Vulnerability identification and scanningAutomated vulnerability remediationLicense identification and compliancePer developerPrice$25+ / developer / month
- 10Vulnerability Scanning
HackerTarget
Vulnerability Scanning
Online attack surface mapping and vulnerability scanning platform for security teams and penetration testers.
Openvas vulnerability scanningZmap fast network scanningWordpress security scanningPrice$10+ / month
