Software Supply Chain
Software Supply Chain groups the cybersecurity tools focused on software supply chain, pulled from across every category so you can compare every option in one place. Filter by category or pricing to narrow the field. Independent and vendor-neutral: our scores and rankings are earned, never bought — sponsored placement is always labeled.
Browse 135 cybersecurity solutions, with 0 security professionals searching monthly
FEATURED
AI-driven SCA tool with reachability analysis, SBOM gen & auto-fix PRs.
CI/CD pipeline firewall for build-time SBOM verification and policy enforcement.
CI/CD-integrated platform for software supply chain security & compliance.
AI security agents automating analyst workflows across cloud, identity, and AppSec.
Real-time firewall that monitors and enforces security policy in CI/CD pipelines.
SCA platform for scanning & remediating open-source dependency vulnerabilities.
Hardened, minimal container images with reduced CVE exposure and SBOM support.
Curated open-source package library with vuln tracking, SBOM, and license compliance.
Curated repo of pre-vetted, security-reviewed open-source language packages.
SBOM lifecycle platform for generating, managing & sharing security artifacts.
Endpoint security platform for visibility & control of AI, extensions, and 3rd-party code.
Mobile app binary analysis platform for supply chain exposure & SBOM mgmt.
Scans AI models for malicious code, vulnerabilities, and unsafe artifacts pre-deployment.
CI/CD-integrated platform for EU Cyber Resilience Act compliance automation.
Integrated product security platform covering threat modeling, CVE monitoring, and CVD.
Tacit unifies software supply chain security through structured vulnerability management.
Cloud-native artifact mgmt & software supply chain security platform.
AI-powered AppSec platform for code, supply chain, secrets & DAST.
SCA tool detecting OSS vulnerabilities & license risks in code, binaries, containers.
SBOM exchange platform for managing software supply chain compliance.
AI SDLC risk prevented or remediated. Automatically. At machine speed.
OpenSCA Project is a dependency security scanner that runs in the browser.
Platform to identify, remediate, and prevent EOL open source software risk.
Client-side tool to check npm projects for Shai Hulud 2.0 supply chain compromise.
