Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
United Kingdom

Apps similar to sbomify include Snyk, which has a free version. Other options are OWASP Dependency-Track, Black Duck Software, FOSSA and ReARM. In total there are six Vulnerability Scanners like sbomify for the web, self-hosting, Linux, Mac and Windows.

Dependency-Track is an intelligent Software Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Organizations worldwide use Black Duck products to secure and manage open source software, eliminating pain related to open source security vulnerabilities and open source license compliance.

FOSSA offers automated license scanning, dependency analysis and reports at each commit. Get a process up an running in 60 seconds, without slowing down development.
ReARM is an abbreviation for "Reliza's Artifact and Release Management". It is a Release Governance Platform to manage lifecycle for product and component releases and organize release metadata, including SBOMs, xBOMs, other security artifacts, vulnerability...


Self-hosted dependency security scanner that finds vulnerable third-party dependencies across your full tree, ranks them by active exploitation, and generates a CycloneDX SBOM.



