Tools that identify open-source components in codebases and detect vulnerabilities, license risks, and outdated dependencies.
Code Security Scanning
Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.
Price position$314+ / month
Starting price: above the category median.Software Composition Analysis
Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance.
Price position$15+ / month
Starting price: below the category median.Software Composition Analysis
Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.
Price position$21+ / month
Starting price: below the category median.Software Composition Analysis
Socket detects malicious open-source dependencies and supply chain risks.
Price position$25+ / seat / month
Starting price: at the category median.Software Composition Analysis
Debricked provides software composition analysis focused on making open-source security accessible with fast scanning, automated fix suggestions, and license compliance.
Price position$25 / month
Price position: at the category median.Software Composition Analysis
Snyk provides developer-first software composition analysis that finds and fixes vulnerabilities in open-source dependencies directly within developer workflows.
Price position$25+ / seat / month
Starting price: at the category median.Software Composition Analysis
SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.
Price position$42+ / month
Starting price: above the category median.Static Application Security Testing
Idera-owned code security and analytics platform with SAST, SCA, and quality across 30+ languages.
Price position$124+ / seat / month
Starting price: above the category median.Software Composition Analysis
Tidelift provides a managed open source subscription that ensures the open-source packages organizations depend on are secure, maintained, and license-compliant.
Price position$9+ / month
Price position: below this category's displayed range.DevSecOps Platforms
Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.
Price position$2,500+ / month
Price position: above this category's displayed range.Software Composition Analysis
Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.
PricingContact sales
Supply Chain Security
Phylum provides automated software supply chain risk analysis that detects malicious open-source packages, author risk, and dependency vulnerabilities.
PricingPricing unavailable
Software Composition Analysis
Now called Mend, providing open source security and license compliance management.
PricingPricing unavailable
Software Composition Analysis
OWASP's intelligent component analysis platform for monitoring third-party components for vulnerabilities.
PricingPricing unavailable
