OWASP Dependency-Track

Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party an...

Free • Open Source

Mac
Windows
Linux
Self-Hosted

What is OWASP Dependency-Track?

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM). This approach provides capabilities that traditional Software Composition Analysis (SCA) solutions cannot achieve.

Dependency-Track monitors component usage across all versions of every application in its portfolio in order to proactively identify risk across an organization. The platform has an API-first design and is ideal for use in Continuous Integration (CI) and Continuous Delivery (CD) environments.

show full description ▾

Official Links

OWASP Dependency-Track Screenshots

Portfolio Dashboard

Dependency Track Promo (Glitch)

Add a screenshot

Suggest and vote on features

OWASP Dependency-Track Features

OWASP Dependency-Track information

Developed bySteve Springett
LicensingOpen Source (Apache-2.0) and Free product.
Written in
Java
Alternatives7 alternatives listed

Supported Languages

English

GitHub repository

1,758 Stars
425 Forks
552 Open Issues
Updated

Popular alternatives

Our users have written 0 comments and reviews about OWASP Dependency-Track, and it has gotten 3 likes

OWASP Dependency-Track was added to AlternativeTo by sspringett on and this page was last updated .

Comments and Reviews Post a comment/review

No comments or reviews, maybe you want to be first?

Post a comment/review

Tags

bom-management
nvd
owasp
software-security
sca
license-policy
security-policy
spdx
security-utilities
appsec
bill-of-materials
cyclonedx
vulndb
component-analysis
Software composition analysis
package-url

Category

Security & Privacy

List containing OWASP Dependency-Track

Recent user activities on OWASP Dependency-Track

alohalex thinks Dependency Track SaaS is an alternative to OWASP Dependency-Track
ago
al
alohalex liked OWASP Dependency-Track
ago
YourSky_blue thinks Dependency Track SaaS is an alternative to OWASP Dependency-Track
ago