Software Composition Analysis for Cve
Software Composition Analysis tools for Cve: the Software Composition Analysis options most relevant when Cve is the priority, compared side by side so you can shortlist faster. Filter by pricing or specialization. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
We cover 21 cybersecurity tools
FEATURED
USE CASES
SCA platform for scanning & remediating open-source dependency vulnerabilities.
Curated open-source package library with vuln tracking, SBOM, and license compliance.
Mobile app binary analysis platform for supply chain exposure & SBOM mgmt.
Integrated portal for open source vulnerability analysis and action plan mgmt.
SCA platform for detecting and managing third-party component risks in the SDLC
Platform to identify, remediate, and prevent EOL open source software risk.
AI-driven platform that patches OSS CVEs in-place without version upgrades.
CLI tool for scanning Python dependencies for known vulnerabilities.
Database for researching & tracking open source components with safety scores.
Dynamic SBOM tool that reduces noise by identifying reachable CVEs in runtime
Automated vulnerability patching for open-source libraries and containers
Continuous vulnerability detection platform for live production environments
Open-source vulnerability detection platform for software supply chain
SBOM tool for identifying software supply chain vulnerabilities
Discovers and identifies vulnerable open-source and third-party libraries
Vulnerability detection dataset for declared & undeclared dependencies in code
SCA tool with proof-based validation and runtime analysis for open-source risks
Filter out vulnerabilities with function-level runtime reachability.
Vulnerability intelligence database with CVE analysis and prioritization
LunaTrace is an open source supply chain security tool that monitors software dependencies for vulnerabilities and integrates with GitHub to notify developers of security issues before deployment.
A command line tool that automates vulnerability scanning of Ruby gems and Rails stack components by identifying CVE vulnerabilities in detected technology versions.
