OWASP Dependency-Track Alternatives

OWASP Dependency-Track is described as 'Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components' and is an app in the security & privacy category. There are more than 10 alternatives to OWASP Dependency-Track for a variety of platforms, including Web-based, SaaS, Docker, Self-Hosted and Linux apps. The best OWASP Dependency-Track alternative is HarborGuard. It's not free, so if you're looking for a free alternative, you could try HarborGuard or Metaport. Other great apps like OWASP Dependency-Track are Black Duck Software, Vulert, Mend Bolt and FOSSA.

More about OWASP Dependency-Track
Copy a direct link to this comment to your clipboard
Alternatives
Get a badge for your siteOWASP Dependency-Track alternatives page was last updated

Alternatives list

  1. PackageFix icon

    PackageFix

     Like

    PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Alerts

    • Discontinued

    Platforms

    • Online
    • US flagUnited States
    Live CVE scan via OSV database. CISA KEV banner flags actively exploited packages first. Health score, severity badges, fix versions, and side-by-side diff all in one view.
    Good alternative?
     
  2. vet icon

    vet

     Like

    vet is a tool for protecting against open source software supply chain attacks. To adapt to organizational needs, it uses an opinionated policy expressed as Common Expressions Language and extensive package security metadata including:

    Cost / License

    Platforms

    • Mac
    • Linux
    • Homebrew
    • IN flagIndia
    vet screenshot 1
    Good alternative?
     
You are at page 2 of OWASP Dependency-Track alternatives