Sca
Browse 101 sca tools
FEATURED
ASPM platform for tracking app security risks from development to deployment
AI-powered automated vuln scanning for apps, APIs, domains, and cloud
AI-powered CNAPP combining SAST, DAST, API, SCA, CSPM, CWPP, and CIEM capabilities
SBOM generation & vuln identification tool for C/C++ and embedded software
Autonomous open source supply chain security & license compliance platform.
ML-driven vuln prioritization using EPSS, CISA KEV & OpenSSF data.
DevSecOps adoption platform using gamified training & governance.
SaaS ASPM platform unifying AppSec, SCA, SBOM, and CI/CD risk management.
Consolidated SaaS platform replacing legacy AppSec tools with CI/CD-integrated security.
Risk-based, product-centric VM platform with PIRATE® risk model.
SAST platform that runs scans and ingests SARIF results into a unified dashboard.
CI/CD-integrated DAST tool for automated web app and API vuln scanning.
SBOM creation, management & vulnerability scanning across the dep. tree.
SCA tool for detecting OSS vulnerabilities and license risks in dependency trees.
Container vulnerability & license scanner with deep dependency tree analysis.
Free SCA tool for open source projects with vuln scanning & SBOM.
Detects and blocks malicious/vulnerable open source packages in supply chains.
Automated SCRM tool for SBOM analysis, VDR, and software cyber risk scoring.
Automotive DevSecOps platform integrating TARA, SAST, SCA, and fuzz testing.
Automotive binary SBOM scanner for supply chain vuln detection & compliance.
OSS risk management system for SBOM generation, vuln & license analysis.
Runtime platform detecting cloud app & supply chain exploitation in real time.
Runtime tool that identifies truly exploitable open-source vulns in production.
AI platform that finds, triages, and auto-remediates vulnerabilities end-to-end.
