swap_horiz FOSSA Alternatives

1

Snyk Open Source

Snyk Open Source is a developer-first platform focused on identifying and fixing open source vulnerabilities. It integra...

Cloud Native Developer Tools Vulnerability Scanning License Detection

8.6 Very Good

2

Tenable Nessus

Tenable Nessus is the industry standard for vulnerability assessment. It is an essential tool for IT administrators and...

Compliance IT Ops Audit Network Security

9.1 Excellent

3

Burp Suite

Burp Suite is the industry-standard tool for web application security testing. It provides a comprehensive suite of tool...

Web Security Penetration Testing Vulnerability Scanning Proxy

8.8 Very Good

4

DeepCode (Snyk)

DeepCode, now integrated into the Snyk platform, uses a massive knowledge base of open-source code to identify security...

Security Static Analysis Debugging AI Engine

8.7 Very Good

5

Snyk Code

Snyk Code is a developer-first security tool that uses AI to find and fix vulnerabilities in real-time. It is specifical...

Security SAAS Vulnerability Scanning Sast

8.6 Very Good

6

Checkmarx (One)

Checkmarx is a heavyweight in the application security space. While it is primarily an enterprise tool, it offers a free...

Security Enterprise Compliance Vulnerability Scanning

8.6 Very Good

7

Checkmarx

Checkmarx is a heavyweight in the application security space, offering comprehensive SAST, DAST, and SCA solutions. Its...

Security Enterprise SAAS Compliance

8.5 Very Good

8

Snyk Cloud

Snyk Cloud is a cloud-based platform for security and dependency management, offering tools to identify and mitigate vul...

Security Cloud Based Dependency Management Vulnerability Scanning

8.1 Very Good

9

Lynis

Lynis is an open-source security auditing tool, not strictly an antivirus, but crucial for system hardening. It performs...

Open Source Command Line Security Audit Vulnerability Scanning

7.9 Good

10

UpGuard

UpGuard focuses on cybersecurity risk and vendor risk management. It provides continuous security ratings for vendors an...

Threat Intelligence Continuous Monitoring Vendor Risk Vulnerability Scanning

7.9 Good

11

Avast Business Security Pro

Avast Business Security Pro offers cloud-based management and robust protection against malware, ransomware, and other t...

Firewall Ransomware Shield Behavioral Analysis Vulnerability Scanning

7.9 Good

12

Nexus Repository Manager

Nexus Repository Manager, from Sonatype, is primarily an artifact repository but includes features for managing open sou...

Vulnerability Scanning License Management Artifact Repository Proxy Caching

7.8 Good

13

JFrog Xray

JFrog Xray is a universal repository manager that scans artifacts for vulnerabilities and license compliance issues. It...

Vulnerability Scanning License Compliance Sbom Universal Repository

7.7 Good

14

OWASP Dependency-Check

OWASP Dependency-Check is a free and open-source tool for identifying known vulnerabilities in project dependencies. It...

Command Line Vulnerability Scanning Dependency Analysis Maven Plugin

7.6 Good

15

ScoutSuite

ScoutSuite is an open-source tool for generating Software Bill of Materials (SBOMs) and analyzing project dependencies....

Python Dependency Graph Sbom Open Source Tool

7.4 Good

16

GitHub Advanced Security (Code Scanning)

GitHub's native Code Scanning, powered by CodeQL, is an essential tool for any GitHub-based project. It automatically sc...

Security Github Automation Compliance

7.2 Good

17

grype

grype is a command-line tool for vulnerability scanning of container images and filesystems. It identifies vulnerabiliti...

Command Line Vulnerability Scanning Sbom Container Scanning

7.1 Good

18

Reposhack

Reposhack is a self-hosted tool that integrates with GitHub to scan repositories for vulnerabilities and license complia...

Self Hosted Vulnerability Scanning License Compliance Sbom

7.0 Good

19

LibreLabs

LibreLabs is an open-source tool designed to generate SBOMs and identify vulnerabilities in open-source dependencies. It...

Github Integration Vulnerability Scanning License Compliance Sbom

6.8 Fair

20

CloudBees CI

CloudBees CI is a commercial CI/CD platform built on top of Jenkins, offering enterprise-grade features and enhanced sec...

Security Scalability Scalable Cloud Hosted

6.7 Fair