FOSSA offers automated license scanning, dependency analysis and reports at each commit. Get a process up an running in 60 seconds, without slowing down development.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
Mend.io Alternatives
Apps similar to Mend.io include HarborGuard, which is open source and free for personal use. Other options are Artemis Security Scanner, Sonatype Nexus Repository OSS, Aikido Security and Proscan AppSec. You're spoiled for choice with Vulnerability Scanners like Mend.io: we list more than 25 alternatives for the web, Linux, Mac, Windows and self-hosting.
Alternatives list
Vulners is a high-quality correlated database of software vulnerabilities. Users can create a custom VM solution using our consolidated database through API, multiple vulnerability scanners, plugins, and many other security tools and integrations.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Linux
- Online
- Software as a Service (SaaS)
United States
Modern cloud-based software licensing solution with advanced features, designed for software vendors selling web, desktop & mobile applications. No license keys. No license servers. Drive revenue, protect IP, reduce license admin costs by up to 70%.
Cost / License
- Paid
- Proprietary
Application type
Platforms
- Mac
- Windows
- Linux
- Online
- Android
- iPhone
- Java Mobile
- BSD
- Windows Phone
- iPad
NetLicensing is a first-class solution in the Licensing as a Service (LaaS) sector. Based on open standards, it provides a cost effective, integrated and scalable license management solution for software vendors and developers who want to concentrate on their product's core...
Cost / License
- Freemium
- Proprietary (Apache-2.0)
Application type
Platforms
- Online
- Self-Hosted
- Software as a Service (SaaS)
Austria
EU
+2
AquilaX Ultimate is a comprehensive software security scanner, designed to detect a wide range of security vulnerabilities in the source code of any application. Is committed to change how contextual analysis is done to eliminate virtually any false positive.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Online
- Software as a Service (SaaS)
United Kingdom
Unlimited vulnerability scanning with flat-rate pricing. Built-in CISA KEV and EPSS threat intelligence, compliance reporting for PCI-DSS, Cyber Essentials, and ISO 27001. No per-IP fees.
Cost / License
- Paid
- Proprietary
Application type
Platforms
- Online
NPMScan is a security analysis tool for the JavaScript ecosystem. It scans npm packages for malicious behavior and supply chain risks that are often invisible to developers. The scanner inspects scripts, dependencies, encoded payloads, metadata, and common attack patterns used...
Cost / License
- Free
- Proprietary
Platforms
- Online
Singapore
+1
Leader in cloud-based enterprise-class software licensing. Easily migrate from Flexera, Safenet/Gemalto, etc. All license models, dynamic entitlements, online/offline support, easy integration with back-office, Win/Linux/Mac/Android/ARM.
Cost / License
- Paid
- Proprietary
Platforms
- Mac
- Windows
- Linux
- Online
- Android
- Android Tablet
- United States
FlexNet Code Aware is a free code scanner that scans Java, NuGet and NPM packages looking for license compliance, IP, and security vulnerability risks.
Cost / License
- Free
- Proprietary
Application type
Platforms
- Mac
- Windows
+1
PrivJs Safe helps secure projects by blocking the installation of vulnerable javascript packages. PrivJs Safe also provides an ESLint plugin @privjs/eslint-plugin-safe to actively detect the import of vulnerable npm packages in the projects.
Cost / License
- Paid
- Proprietary (LGPL-3.0)
Application type
Platforms
- Online
- Software as a Service (SaaS)
SkillRisk is a specialized security analysis tool designed for the AI Agent ecosystem, specifically focusing on Claude Code and Model Context Protocol (MCP) skills.
Cost / License
- Freemium
- Proprietary
Platforms
- Online
Thailand
+4
Local command-line scanner that measures dependency, framework and runtime drift, checks known vulnerability advisories, and prioritizes upgrades. It builds a code graph to trace imports and calls, assess change impact, and provide matching docs to AI assistants.
Cost / License
- Freemium
- Open Source (Apache-2.0)
Application type
Platforms
- Mac
- Windows
- Linux
- Online
- Software as a Service (SaaS)
- Docker
- United Kingdom
+2
