PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.
Platforms
- Online
United States
Snyk Alternatives
Sites and apps similar to Snyk include GitHub, which has a free version. Other options are Patchdex, Artemis Security Scanner, Mend Renovate and Metaport. You're spoiled for choice with Vulnerability Scanners like Snyk: we list more than 25 alternatives for Mac, Windows, Linux, self-hosting and Android.
Alternatives list
Security API for AI agents to detect prompt injection, jailbreak attempts, and unsafe operational intent before execution.
Cost / License
- Freemium
- Proprietary
Platforms
- Software as a Service (SaaS)
Examines codebases for secrets, dependency risks, and unsafe API keys, checks running apps for TLS and security headers, and analyzes Supabase, Firebase, and Firestore configs for exposure—then provides a single grade, report, and actionable fixes.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
- Software as a Service (SaaS)
Belgium
EU
FlexNet Code Aware is a free code scanner that scans Java, NuGet and NPM packages looking for license compliance, IP, and security vulnerability risks.
Cost / License
- Free
- Proprietary
Application type
Platforms
- Mac
- Windows
+1
Konvu automates vulnerability triage. It checks exploitability conditions against your code and environment, produces evidence-backed verdicts, and pushes results back to the tools you already use.
Cost / License
- Paid
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)
A single pane of glass for understanding and mitigating risks across your entire codebase and supply chain.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)
United Kingdom
nittim scans a GitHub repository for committed secrets and vulnerable dependencies for free, then runs a full security audit that returns findings with evidence and a fix for each. It runs inside Cursor, Claude Code, Windsurf, Codex and Copilot through MCP, or from the web.
Cost / License
- Freemium
- Proprietary
Platforms
- Online
SecDash automatically detects security vulnerabilities in applications created with ChatGPT, Claude, and other AI tools, providing clear and actionable guidance.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
Brazil
Local command-line scanner that measures dependency, framework and runtime drift, checks known vulnerability advisories, and prioritizes upgrades. It builds a code graph to trace imports and calls, assess change impact, and provide matching docs to AI assistants.
Cost / License
- Freemium
- Open Source (Apache-2.0)
Application type
Platforms
- Mac
- Windows
- Linux
- Online
- Software as a Service (SaaS)
- Docker
- United Kingdom
+2
RankedRight is the triage tool that automatically ranks vulnerabilities based on the rules set by its user, factoring in what is critical to the business, and delegating it to the most appropriate person to resolve.
Cost / License
- Paid
- Proprietary
Application type
Platforms
- Online
- United Kingdom
sbomify is the trust center for your software supply chain. Store every SBOM and compliance document in one place, track them across products and releases, and share them with customers and regulators on demand. CycloneDX and SPDX, built for EU CRA compliance.
Cost / License
- Freemium
- Open Source (Apache-2.0)
Platforms
- Online
- Linux
- Docker
- United Kingdom
+9
Timesys Vigiles is a Software Composition Analysis (SCA) tool that helps generate and analyze a Software Bill of Materials (SBOM) for publicly known cybersecurity vulnerabilities, particularly CVEs. Vigiles is optimized for embedded systems, and it provides a complete...
Cost / License
- Freemium
- Proprietary
Application typeApplication types
Platforms
- Online
- Software as a Service (SaaS)
- United States
