OWASP Dependency-Track Alternatives

Apps similar to OWASP Dependency-Track include HarborGuard, which is open source and free for personal use. Other options are Metaport, Mend Renovate, Black Duck Software and Vulert. You can choose from more than 10 Vulnerability Scanners like OWASP Dependency-Track for the web, self-hosting, Linux, Mac and Windows.

More about OWASP Dependency-Track
Copy a direct link to this comment to your clipboard
Alternatives
OWASP Dependency-Track alternatives page was last updated

Alternatives list

  1. PackageFix icon

    PackageFix

     Like

    PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Alerts

    • Discontinued

    Platforms

    • Online
    • US flagUnited States
    Live CVE scan via OSV database. CISA KEV banner flags actively exploited packages first. Health score, severity badges, fix versions, and side-by-side diff all in one view.
    Good alternative?
     
  2. vet icon

    vet

     Like

    vet is a tool for protecting against open source software supply chain attacks. To adapt to organizational needs, it uses an opinionated policy expressed as Common Expressions Language and extensive package security metadata including:

    Cost / License

    Platforms

    • Mac
    • Linux
    • Homebrew
    • IN flagIndia
    vet screenshot 1
    Good alternative?
     
You are at page 2 of OWASP Dependency-Track alternatives