Black Duck Software Composition Analysis Alternatives

Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

SonarQube is a self-managed static analysis tool used for continuous codebase inspection.

freemium $150.0 / Annually

Find & fix security and compliance issues in open source libraries in real-time.

freemium

The industry’s most comprehensive AppSec platform, Checkmarx One is fast, accurate, and accelerates your business.

Create, review and deploy code together with GitLab open source git repo management software | GitLab

Open source license compliance and dependency analysis

OWASP Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows...

Automated dependency updates for your Ruby, Python, JavaScript, PHP, .NET, Go, Elixir, Rust, Java and Elm.

Qualys helps your business automate the full spectrum of auditing, compliance and protection of your IT systems and web applications.

Organizations worldwide use Black Duck Software's open source management and security solutions to ensure security in their applications and containers.‎About · ‎We're Hiring!

FlexNet Code Insight is a single integrated solution for open source license compliance and security. Take control of your open source software management

Acunetix Vulnerability Scanner is a platform that offers a web vulnerability scanner and provides security testing to users for their web applications.

Veracode's application security software products are simpler and more scalable to increase the resiliency of your application infrastructure.