Software Composition Analysis
Software Composition Analysis (SCA) tools for identifying security vulnerabilities in open source components, third-party libraries, and software dependencies.
Browse 163 software composition analysis tools
FEATURED
RELATED TASKS
Fix-first AppSec powered by agentic remediation, covering SCA, SAST & secrets.
Fix-first AppSec powered by agentic remediation, covering SCA, SAST & secrets.
Autonomous open source supply chain security & license compliance platform.
Autonomous open source supply chain security & license compliance platform.
SBOM creation, management & vulnerability scanning across the dep. tree.
SBOM creation, management & vulnerability scanning across the dep. tree.
SCA tool for detecting OSS vulnerabilities and license risks in dependency trees.
SCA tool for detecting OSS vulnerabilities and license risks in dependency trees.
Free SCA tool for open source projects with vuln scanning & SBOM.
Free SCA tool for open source projects with vuln scanning & SBOM.
Detects and blocks malicious/vulnerable open source packages in supply chains.
Detects and blocks malicious/vulnerable open source packages in supply chains.
Automated SCRM tool for SBOM analysis, VDR, and software cyber risk scoring.
Automated SCRM tool for SBOM analysis, VDR, and software cyber risk scoring.
Automotive binary SBOM scanner for supply chain vuln detection & compliance.
Automotive binary SBOM scanner for supply chain vuln detection & compliance.
SCA service to manage open source component security, licenses, and compliance.
SCA service to manage open source component security, licenses, and compliance.
OSS risk management system for SBOM generation, vuln & license analysis.
OSS risk management system for SBOM generation, vuln & license analysis.
Database for researching & tracking open source components with safety scores.
Database for researching & tracking open source components with safety scores.
Web scanner that detects vulnerable/outdated components and license risks.
Web scanner that detects vulnerable/outdated components and license risks.
SCA tool scanning web projects for vulnerable, outdated, or non-compliant components.
SCA tool scanning web projects for vulnerable, outdated, or non-compliant components.
IDE plugin that scans dependencies for vulnerabilities during development.
IDE plugin that scans dependencies for vulnerabilities during development.
SCA scanner for open source vulnerabilities, license compliance & SBOM.
SCA scanner for open source vulnerabilities, license compliance & SBOM.
Binary analysis tool for supply chain security in automotive and IoT firmware.
Binary analysis tool for supply chain security in automotive and IoT firmware.
Traces third-party library usage at function level to identify dependency risk.
Traces third-party library usage at function level to identify dependency risk.
Code signing & software supply chain security platform with policy governance.
Code signing & software supply chain security platform with policy governance.
Tool for searching, comparing, and evaluating open source dependencies.
Tool for searching, comparing, and evaluating open source dependencies.
Enterprise SBOM management platform for software supply chain security.
Enterprise SBOM management platform for software supply chain security.
Automated NTIA-compliant SBOM generation for software supply chain risk mgmt.
Automated NTIA-compliant SBOM generation for software supply chain risk mgmt.
Software/firmware validation platform generating trust scores via SBOM & malware analysis.
Software/firmware validation platform generating trust scores via SBOM & malware analysis.
Scans repos to inventory AI models, agents, datasets & plugins for AI-BOM.
Scans repos to inventory AI models, agents, datasets & plugins for AI-BOM.
Software supply chain security platform for managing open source dependencies
Software supply chain security platform for managing open source dependencies
Software Composition Analysis Tools - FAQ
Common questions about Software Composition Analysis tools including selection guides, pricing, and comparisons.
Software Composition Analysis (SCA) tools for identifying security vulnerabilities in open source components, third-party libraries, and software dependencies.
