ReARM is described as 'Abbreviation for "Reliza's Artifact and Release Management". It Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability' and is an app in the security & privacy category. There are six alternatives to ReARM for a variety of platforms, including Web-based, SaaS, Linux, Docker and Self-Hosted apps. The best ReARM alternative is OWASP Dependency-Track, which is both free and Open Source. Other great apps like ReARM are Black Duck Software, FOSSA, JFrog and sbomify.
Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
United States
Organizations worldwide use Black Duck products to secure and manage open source software, eliminating pain related to open source security vulnerabilities and open source license compliance.
United States
FOSSA offers automated license scanning, dependency analysis and reports at each commit. Get a process up an running in 60 seconds, without slowing down development.
sbomify is the trust center for your software supply chain. Store every SBOM and compliance document in one place, track them across products and releases, and share them with customers and regulators on demand. CycloneDX and SPDX, built for EU CRA compliance.
United Kingdom
Dependency Track SaaS provided by YourSky.blue is the managed cloud solution of the popular open-source Dependency-Track. Always up to date with the latest security bulletins, it allows to easily monitor all the chain of software components through powerful dashboards and...
Switzerland
