Mend Renovate is described as 'Software product that helps developers automate dependency updates by identifying new package versions and delivering them to the application's codebase. It can generate pull requests and issues in the repository with details about the updates, including' and is a vulnerability scanner in the development category. There are more than 10 alternatives to Mend Renovate for a variety of platforms, including Web-based, SaaS, Windows, Self-Hosted and Mac apps. The best Mend Renovate alternative is GitHub, which is free. Other great apps like Mend Renovate are HarborGuard, Metaport, Aikido Security and Proscan AppSec.
AquilaX Ultimate is a comprehensive software security scanner, designed to detect a wide range of security vulnerabilities in the source code of any application. Is committed to change how contextual analysis is done to eliminate virtually any false positive.
United Kingdom
NPMScan is a security analysis tool for the JavaScript ecosystem. It scans npm packages for malicious behavior and supply chain risks that are often invisible to developers. The scanner inspects scripts, dependencies, encoded payloads, metadata, and common attack patterns used...
Singapore
Monitor and analyze Ruby project dependencies with a simple score, detailed reports, and no required access to your codebase.
United States
Dependency Update Automation for npm, composer and docker made easy. Check your git repositories for vulnerabilities now!.
Germany
EU
PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.
United States
SkillRisk is a specialized security analysis tool designed for the AI Agent ecosystem, specifically focusing on Claude Code and Model Context Protocol (MCP) skills.
Thailand
Local command-line scanner that measures dependency, framework and runtime drift, checks known vulnerability advisories, and prioritizes upgrades. It builds a code graph to trace imports and calls, assess change impact, and provide matching docs to AI assistants.
United Kingdom
Norway
PrivJs Safe helps secure projects by blocking the installation of vulnerable javascript packages. PrivJs Safe also provides an ESLint plugin @privjs/eslint-plugin-safe to actively detect the import of vulnerable npm packages in the projects.
A single pane of glass for understanding and mitigating risks across your entire codebase and supply chain.
United Kingdom
Software updates straight to your inbox. Touchpine monitors your applications and libraries - you no longer need to subscribe to dozens of security mailing lists to watch for software updates. Touchpine delivers fully customized notifications to your email.
