-
SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
-
Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.
-
Open source license compliance and dependency analysis.
-
OWASP Dependency-Track is an intelligent Software Composition Analysis (SCA) platform that allows...
-
Black Duck Software Composition Analysis (SCA) provides a solution for managing open source security, quality, and license compliance risks that comes from the use of open source and third-party code.
-
JFrog Xray is a universal software composition analysis (SCA) solution that natively integrates with Artifactory.
-
ScanCode is a suite of utilities used to scan a codebase for license, copyright and other...
-
OWASP dependency-check is open-source and can be used to scan Java and .NET applications via the CLI or using plugins.Read articles Continuous Security with OWASP Dependency Check and Integrating OWASP Dependency Check with Jenkins to CI/CD.
-
Gemalto SafeNet KeySecure is a centralized cryptographic key management platform.
-
The managed cloud solution of the popular open-source Dependency-Track scans your software components for vulnerabilities and licenses compliance issues.
-
Monitor your open source dependencies.