Software Composition Analysis

Aikido Security

OT Security

Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.

Black Duck

Code Snippet Management

Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.

Sonatype

Supply Chain Management

Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance.

Phylum

Supply Chain Management

Phylum provides automated software supply chain risk analysis that detects malicious open-source packages, author risk, and dependency vulnerabilities.

WhiteSource

Static Application Security Testing

Now called Mend, providing open source security and license compliance management.

Mend.io

Dynamic Application Security Testing

Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.

Socket

Supply Chain Management

Socket detects malicious open-source dependencies and supply chain risks.

Debricked

Open Source Management

Debricked provides software composition analysis focused on making open-source security accessible with fast scanning, automated fix suggestions, and license compliance.

Snyk

Software Composition Analysis

Snyk provides developer-first software composition analysis that finds and fixes vulnerabilities in open-source dependencies directly within developer workflows.

SOOS

Dynamic Application Security Testing

SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.

Kiuwan

Code Quality and Linting

Idera-owned code security and analytics platform with SAST, SCA, and quality across 30+ languages.

Tidelift

Developer Tools

Tidelift provides a managed open source subscription that ensures the open-source packages organizations depend on are secure, maintained, and license-compliant.

Dependency-Track

Software Composition Analysis

OWASP's intelligent component analysis platform for monitoring third-party components for vulnerabilities.

Checkmarx

Supply Chain Planning

Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.