sbomify Alternatives

Apps similar to sbomify include Snyk, which has a free version. Other options are OWASP Dependency-Track, Black Duck Software, FOSSA and ReARM. In total there are six Vulnerability Scanners like sbomify for the web, self-hosting, Linux, Mac and Windows.

Copy a direct link to this comment to your clipboard
Alternatives
sbomify alternatives page was last updated

Alternatives list

  1. Snyk icon
     7 likes

    Continuously find & fix vulnerabilities in your dependencies.

    44 Snyk alternatives

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Online
    • GB flagUnited Kingdom
    Snyk screenshot 1
    Good alternative?
     
  2. Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

    Cost / License

    Platforms

    • Mac
    • Windows
    • Linux
    • Self-Hosted
    Good alternative?
     
  3. Organizations worldwide use Black Duck products to secure and manage open source software, eliminating pain related to open source security vulnerabilities and open source license compliance.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Online
    Good alternative?
     
  4. FOSSA icon
     3 likes

    FOSSA offers automated license scanning, dependency analysis and reports at each commit. Get a process up an running in 60 seconds, without slowing down development.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Online
    Good alternative?
     
  5. ReARM icon
     1 like

    ReARM is an abbreviation for "Reliza's Artifact and Release Management". It is a Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability...

    Cost / License

    Platforms

    • Online
    • Self-Hosted
    • Software as a Service (SaaS)
    • Docker
    Good alternative?
     
  6. depproof icon
     Like

    Self-hosted dependency security scanner that finds vulnerable third-party dependencies across your full tree, ranks them by active exploitation, and generates a CycloneDX SBOM.

    Cost / License

    • Freemium
    • Proprietary

    Platforms

    • Self-Hosted
    • Linux
    • Docker
    Good alternative?
     
6 of 6 sbomify alternatives