OWASP Dependency-Track is described as 'Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components' and is an app in the security & privacy category. There are more than 10 alternatives to OWASP Dependency-Track for a variety of platforms, including Web-based, SaaS, Docker, Self-Hosted and Linux apps. The best OWASP Dependency-Track alternative is HarborGuard. It's not free, so if you're looking for a free alternative, you could try HarborGuard or Metaport. Other great apps like OWASP Dependency-Track are Black Duck Software, Vulert, Mend Bolt and FOSSA.
HarborGuard is a unified security scanning platform that provides deep vulnerability analysis and visualization for Docker images using industry-leading security tools.
Security vulnerability and end-of-life prioritization for every web development team. Identify what needs attention across every website and application, prioritise upgrades earlier, and lead better customer and stakeholder conversations.
New Zealand
Mend Renovate is a software product that helps developers automate dependency updates by identifying new package versions and delivering them to the application's codebase. It can generate pull requests and issues in the repository with details about the updates, including...
Israel
Organizations worldwide use Black Duck products to secure and manage open source software, eliminating pain related to open source security vulnerabilities and open source license compliance.
United States
Vulert notifies you if a SECURITY ISSUE is found in any of the open-source software you use. No installation needed.
Mend Bolt is designed to provide real-time security alerts and compliance issues related to your open source dependencies. It operates within Azure DevOps or GitHub, enabling you to identify and address open source vulnerabilities promptly.
Israel
FOSSA offers automated license scanning, dependency analysis and reports at each commit. Get a process up an running in 60 seconds, without slowing down development.
Dependency Track SaaS provided by YourSky.blue is the managed cloud solution of the popular open-source Dependency-Track. Always up to date with the latest security bulletins, it allows to easily monitor all the chain of software components through powerful dashboards and...
Switzerland
ReARM is an abbreviation for "Reliza's Artifact and Release Management". It is a Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability...
Canada
Mend.io offers the first AI native application security platform, purpose-built to secure AI-generated code and embedded AI components. Our unified platform enables companies to manage application risk effectively in modern software development.
Israel
Local command-line scanner that measures dependency, framework and runtime drift, checks known vulnerability advisories, and prioritizes upgrades. It builds a code graph to trace imports and calls, assess change impact, and provide matching docs to AI assistants.
United Kingdom
sbomify is the trust center for your software supply chain. Store every SBOM and compliance document in one place, track them across products and releases, and share them with customers and regulators on demand. CycloneDX and SPDX, built for EU CRA compliance.
United Kingdom
