Top 11 products relevant to Code Analysis and Open Source

SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

Open Source freemium $150.0 / Annually

Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

Open Source

Open source license compliance and dependency analysis.

Open Source

OWASP Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows...

Open Source

Black Duck Software Composition Analysis (SCA) provides a solution for managing open source security, quality, and license compliance risks that comes from the use of open source and third-party code.

JFrog Xray is a universal software composition analysis (SCA) solution that natively integrates with Artifactory.

ScanCode is a suite of utilities used to scan a codebase for license, copyright and other...

OWASP dependency-check is open-source and can be used to scan Java and .NET applications via the CLI or using plugins.Read articles Continuous Security with OWASP Dependency Check and Integrating OWASP Dependency Check with Jenkins to CI/CD.

Gemalto SafeNet KeySecure is a centralized cryptographic key management platform.

The managed cloud solution of the popular open-source Dependency-Track scans your software components for vulnerabilities and licenses compliance issues.

freemium $4.2 / Monthly (From per users)

Monitor your open source dependencies.