Software Composition Analysis
Best Flyingduck Comprehensive SBOM Management alternatives and competitors
23 active tools in the same primary category, including DerSecur Software Composition Analysis (SCA), Invicti Software Composition Analysis, Raven Runtime Prevention, and 20 more. Open any row for the full SecurityListing profile, pricing context, and integrations.
All 23 alternatives
DerSecur Software Composition Analysis (SCA)
DerSecur Software Composition Analysis (SCA) on SecurityListing: SCA tool for SBOM generation, dependency analysis, and open-source risk mgmt.
Software Composition Analysis
Invicti Software Composition Analysis
Invicti Software Composition Analysis on SecurityListing: SCA tool with proof-based validation and runtime analysis for open-source risks
Software Composition Analysis
Raven Runtime Prevention
Raven Runtime Prevention on SecurityListing: Runtime protection preventing supply-chain attacks & exploits via library-level policies
Software Composition Analysis
Finite State Platform
Finite State Platform on SecurityListing: Platform for vulnerability detection in firmware, binaries, and SBOMs
Software Composition Analysis
Raven Runtime SCA
Raven Runtime SCA on SecurityListing: Runtime SCA tool that identifies exploitable vulnerabilities in cloud environments
Software Composition Analysis
MergeBase Software Composition Analysis
MergeBase Software Composition Analysis on SecurityListing: SCA platform for managing open source vulnerabilities across SDLC
Software Composition AnalysisVulert
Vulert provides software composition analysis with no install, using manifest files.
Software Composition Analysis
DeepSource SCA
DeepSource SCA on SecurityListing: SCA platform with reachability analysis, AI-powered fixes, and license compliance
Software Composition Analysis
Endor Labs Application Security
Endor Labs Application Security on SecurityListing: AI-powered AppSec platform for code, dependencies, and container security
Software Composition Analysis
Flyingduck Software Composition Analysis
Flyingduck Software Composition Analysis on SecurityListing: SCA tool for identifying & resolving vulnerabilities in dependencies
Software Composition Analysis
Phylum
Phylum on SecurityListing: Identifies 137 malicious npm packages and gathers system information to a remote server.
Software Composition Analysis
Flyingduck Code Security Intelligence
Flyingduck Code Security Intelligence on SecurityListing: SAST tool that detects logical flaws and business logic vulnerabilities
Software Composition Analysis
Wiz Unified Security
Wiz Unified Security on SecurityListing: Unified security platform for code, CI/CD, and cloud environments
Software Composition Analysis
Heeler Runtime, Fixability-First SCA
Heeler Runtime, Fixability-First SCA on SecurityListing: Runtime SCA tool prioritizing fixable & exploitable open-source vulnerabilities
Software Composition Analysis
MatosSphere Software Composition Analysis
MatosSphere Software Composition Analysis on SecurityListing: SCA tool for detecting vulnerabilities & license risks in open-source deps
Software Composition Analysis
SonarSource Advanced Security
SonarSource Advanced Security on SecurityListing: SAST and SCA platform for code security analysis with taint analysis
Software Composition Analysis
Flyingduck Secure Every Commit
Flyingduck Secure Every Commit on SecurityListing: Commit-level code security scanning for vulnerabilities, secrets, and licenses
Software Composition Analysis
FossID Software Composition Analysis
FossID Software Composition Analysis on SecurityListing: SCA tool for code scanning, license identification, and SBOM generation
Software Composition Analysis
pac-resolver
pac-resolver on SecurityListing: Pac-resolver, a popular NPM package with 3 million weekly downloads, has a severe remote code execution flaw.
Software Composition Analysis
BoostSecurity Software Supply Chain Protection
BoostSecurity Software Supply Chain Protection on SecurityListing: Software supply chain security platform for SDLC infrastructure protection
Software Composition Analysis
Kodem Zero-waste Application Security
Kodem Zero-waste Application Security on SecurityListing: AI-native AppSec platform for code-to-runtime security with automated triaging
Software Composition Analysis
Sabotage: Code added to popular NPM package wiped files in Russia and Belarus
Sabotage: Code added to popular NPM package wiped files in Russia and Belarus on SecurityListing: A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.
Software Composition Analysis
The Code Registry Application & Supply Chain Security
The Code Registry Application & Supply Chain Security on SecurityListing: AI-driven app & supply chain security platform with SBOM generation & scanning
Software Composition Analysis
FAQ
- Are these “official” vendor pairings?
- No. Alternatives are category peers for discovery, not paid placements. Vendors can still claim profiles and keep their product pages up to date.
- Why is my favorite tool missing?
- Only active listings in the same primary category appear. Multi-category products may move when their primary category is updated.