Best Flyingduck Software Composition Analysis alternatives and competitors

Finite State Platform

Finite State Platform on SecurityListing: Platform for vulnerability detection in firmware, binaries, and SBOMs

Invicti Software Composition Analysis

Invicti Software Composition Analysis on SecurityListing: SCA tool with proof-based validation and runtime analysis for open-source risks

DerSecur Software Composition Analysis (SCA)

DerSecur Software Composition Analysis (SCA) on SecurityListing: SCA tool for SBOM generation, dependency analysis, and open-source risk mgmt.

MergeBase Software Composition Analysis

MergeBase Software Composition Analysis on SecurityListing: SCA platform for managing open source vulnerabilities across SDLC

Endor Labs Application Security

Endor Labs Application Security on SecurityListing: AI-powered AppSec platform for code, dependencies, and container security

BoostSecurity Software Supply Chain Protection

BoostSecurity Software Supply Chain Protection on SecurityListing: Software supply chain security platform for SDLC infrastructure protection

Vulert

Vulert provides software composition analysis with no install, using manifest files.

Flyingduck Code Security Intelligence

Flyingduck Code Security Intelligence on SecurityListing: SAST tool that detects logical flaws and business logic vulnerabilities

FossID Software Composition Analysis

FossID Software Composition Analysis on SecurityListing: SCA tool for code scanning, license identification, and SBOM generation

Raven Runtime Prevention

Raven Runtime Prevention on SecurityListing: Runtime protection preventing supply-chain attacks & exploits via library-level policies

Raven Runtime SCA

Raven Runtime SCA on SecurityListing: Runtime SCA tool that identifies exploitable vulnerabilities in cloud environments

SonarSource Advanced Security

SonarSource Advanced Security on SecurityListing: SAST and SCA platform for code security analysis with taint analysis

Wiz Unified Security

Wiz Unified Security on SecurityListing: Unified security platform for code, CI/CD, and cloud environments

Flyingduck Secure Every Commit

Flyingduck Secure Every Commit on SecurityListing: Commit-level code security scanning for vulnerabilities, secrets, and licenses

Phylum

Phylum on SecurityListing: Identifies 137 malicious npm packages and gathers system information to a remote server.

DeepSource SCA

DeepSource SCA on SecurityListing: SCA platform with reachability analysis, AI-powered fixes, and license compliance

Flyingduck Comprehensive SBOM Management

Flyingduck Comprehensive SBOM Management on SecurityListing: SBOM management platform for tracking dependencies and vulnerabilities

pac-resolver

pac-resolver on SecurityListing: Pac-resolver, a popular NPM package with 3 million weekly downloads, has a severe remote code execution flaw.

Kodem Zero-waste Application Security

Kodem Zero-waste Application Security on SecurityListing: AI-native AppSec platform for code-to-runtime security with automated triaging

Heeler Runtime, Fixability-First SCA

Heeler Runtime, Fixability-First SCA on SecurityListing: Runtime SCA tool prioritizing fixable & exploitable open-source vulnerabilities

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus

Sabotage: Code added to popular NPM package wiped files in Russia and Belarus on SecurityListing: A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.

MatosSphere Software Composition Analysis

MatosSphere Software Composition Analysis on SecurityListing: SCA tool for detecting vulnerabilities & license risks in open-source deps

The Code Registry Application & Supply Chain Security

The Code Registry Application & Supply Chain Security on SecurityListing: AI-driven app & supply chain security platform with SBOM generation & scanning