Tools that identify open-source components in codebases and detect vulnerabilities, license risks, and outdated dependencies.
Code Security Scanning
Aikido Security brings together code, cloud, dependency, and runtime security workflows in a more approachable platform for modern engineering teams.
Price$314+ / month
Starting price: above the category median.Software Composition Analysis
Sonatype provides software supply chain management and SCA tools including Nexus Repository and Sonatype Lifecycle for managing open-source security and compliance.
Price$14.58+ / month
Starting price: below the category median.
Software Composition Analysis
Mend.io is a software composition analysis and application security platform that helps development teams identify and remediate vulnerabilities in open-source dependencies.
Price$20.83+ / month
Starting price: below the category median.
Software Composition Analysis
Socket detects malicious open-source dependencies and supply chain risks.
Price$25+ / seat / month
Starting price: at the category median.Software Composition Analysis
Debricked provides software composition analysis focused on making open-source security accessible with fast scanning, automated fix suggestions, and license compliance.
Price$25 / month
Price position: at the category median.
Software Composition Analysis
Snyk provides developer-first software composition analysis that finds and fixes vulnerabilities in open-source dependencies directly within developer workflows.
Price$25+ / seat / month
Starting price: at the category median.Software Composition Analysis
SOOS provides affordable software composition analysis and DAST solutions that help development teams identify vulnerabilities and license issues in open-source dependencies.
Price$42+ / month
Starting price: above the category median.Static Application Security Testing
Idera-owned code security and analytics platform with SAST, SCA, and quality across 30+ languages.
Price$124+ / seat / month
Starting price: above the category median.
Software Composition Analysis
Tidelift provides a managed open source subscription that ensures the open-source packages organizations depend on are secure, maintained, and license-compliant.
Price$8.33+ / month
Price position: below this category's displayed range.
Application Security Posture Management
Behavior-based application security posture management platform for developer-first security.
Price$25+ / month
Starting price: at the category median.
DevSecOps Platforms
Checkmarx provides a comprehensive application security platform including software composition analysis, SAST, DAST, and API security for enterprise DevSecOps programs.
Price$2,500+ / month
Price position: above this category's displayed range.Software Composition Analysis
Black Duck provides software composition analysis that helps organizations manage security, quality, and license compliance risks from open-source and third-party code.
PriceContact sales
Supply Chain Security
Phylum provides automated software supply chain risk analysis that detects malicious open-source packages, author risk, and dependency vulnerabilities.
Software Composition Analysis
Now called Mend, providing open source security and license compliance management.
Software Composition Analysis
OWASP's intelligent component analysis platform for monitoring third-party components for vulnerabilities.
