Software Composition Analysis Tools
Software Composition Analysis tools and solutions.
25 products available
DerSecur Software Composition
Software Composition Analysis
DerSecur Software Composition Analysis (SCA) on SecurityListing: SCA tool for SBOM generation, dependency analysis, and open-source risk mgmt.
Invicti Software Composition
Software Composition Analysis
Invicti Software Composition Analysis on SecurityListing: SCA tool with proof-based validation and runtime analysis for open-source risks
Raven Runtime Prevention
Software Composition Analysis
Raven Runtime Prevention on SecurityListing: Runtime protection preventing supply-chain attacks & exploits via library-level policies
Finite State Platform
Software Composition Analysis
Finite State Platform on SecurityListing: Platform for vulnerability detection in firmware, binaries, and SBOMs
Snyk Developer Security
Cloud Security
Snyk is a developer security platform that enables teams to find and automatically fix vulnerabilities in open source dependencies, container images, infrastructure as code, and application code. Unlike traditional security tools that operate as gate-checks, Snyk integrates directly into developer workflows through IDE plugins, CI/CD integrations, and SCM systems, enabling security testing at every stage of development.
Raven Runtime SCA
Software Composition Analysis
Raven Runtime SCA on SecurityListing: Runtime SCA tool that identifies exploitable vulnerabilities in cloud environments
MergeBase Software Composition
Software Composition Analysis
MergeBase Software Composition Analysis on SecurityListing: SCA platform for managing open source vulnerabilities across SDLC
Vulert
Software Composition Analysis
Vulert provides software composition analysis with no install, using manifest files.
DeepSource SCA
Software Composition Analysis
DeepSource SCA on SecurityListing: SCA platform with reachability analysis, AI-powered fixes, and license compliance
Endor Labs Application
Software Composition Analysis
Endor Labs Application Security on SecurityListing: AI-powered AppSec platform for code, dependencies, and container security
Flyingduck Software Composition
Software Composition Analysis
Flyingduck Software Composition Analysis on SecurityListing: SCA tool for identifying & resolving vulnerabilities in dependencies
Phylum
Software Composition Analysis
Phylum on SecurityListing: Identifies 137 malicious npm packages and gathers system information to a remote server.
Flyingduck Comprehensive SBOM
Software Composition Analysis
Flyingduck Comprehensive SBOM Management on SecurityListing: SBOM management platform for tracking dependencies and vulnerabilities
Flyingduck Code Security
Software Composition Analysis
Flyingduck Code Security Intelligence on SecurityListing: SAST tool that detects logical flaws and business logic vulnerabilities
Wiz Unified Security
Software Composition Analysis
Wiz Unified Security on SecurityListing: Unified security platform for code, CI/CD, and cloud environments
Heeler Runtime, Fixability-First
Software Composition Analysis
Heeler Runtime, Fixability-First SCA on SecurityListing: Runtime SCA tool prioritizing fixable & exploitable open-source vulnerabilities
MatosSphere Software Composition
Software Composition Analysis
MatosSphere Software Composition Analysis on SecurityListing: SCA tool for detecting vulnerabilities & license risks in open-source deps
SonarSource Advanced Security
Software Composition Analysis
SonarSource Advanced Security on SecurityListing: SAST and SCA platform for code security analysis with taint analysis
Flyingduck Secure Every
Software Composition Analysis
Flyingduck Secure Every Commit on SecurityListing: Commit-level code security scanning for vulnerabilities, secrets, and licenses
FossID Software Composition
Software Composition Analysis
FossID Software Composition Analysis on SecurityListing: SCA tool for code scanning, license identification, and SBOM generation
pac-resolver
Software Composition Analysis
pac-resolver on SecurityListing: Pac-resolver, a popular NPM package with 3 million weekly downloads, has a severe remote code execution flaw.
BoostSecurity Software Supply
Software Composition Analysis
BoostSecurity Software Supply Chain Protection on SecurityListing: Software supply chain security platform for SDLC infrastructure protection
Kodem Zero-waste Application
Software Composition Analysis
Kodem Zero-waste Application Security on SecurityListing: AI-native AppSec platform for code-to-runtime security with automated triaging
Sabotage: Code added
Software Composition Analysis
Sabotage: Code added to popular NPM package wiped files in Russia and Belarus on SecurityListing: A developer added malicious code to a popular open-source package, wiping files on computers in Russia and Belarus as a protest.