swap_horiz JFrog Xray Alternatives

1

Reposhack

Reposhack is a self-hosted tool that integrates with GitHub to scan repositories for vulnerabilities and license complia...

Self Hosted Vulnerability Scanning License Compliance Sbom

7.0 Good

2

LibreLabs

LibreLabs is an open-source tool designed to generate SBOMs and identify vulnerabilities in open-source dependencies. It...

Github Integration Vulnerability Scanning License Compliance Sbom

6.8 Fair

3

WhiteSource Bolt

WhiteSource Bolt is a free open source compliance tool that scans projects for open source components, identifies licens...

Free Tier Vulnerability Management License Compliance Sbom

8.9 Very Good

4

Snyk Open Source

Snyk Open Source is a developer-first platform focused on identifying and fixing open source vulnerabilities. It integra...

Cloud Native Developer Tools Vulnerability Scanning License Detection

8.6 Very Good

5

grype

grype is a command-line tool for vulnerability scanning of container images and filesystems. It identifies vulnerabiliti...

Command Line Vulnerability Scanning Sbom Container Scanning

7.1 Good

6

FOSSA

FOSSA is a comprehensive open source compliance platform that automates license and vulnerability scanning. It generates...

Vulnerability Scanning Commercial Support Sbom Generation License Detection

9.2 Excellent

7

Tenable Nessus

Tenable Nessus is the industry standard for vulnerability assessment. It is an essential tool for IT administrators and...

Compliance IT Ops Audit Network Security

9.0 Excellent

8

Burp Suite

Burp Suite is the industry-standard tool for web application security testing. It provides a comprehensive suite of tool...

Web Security Penetration Testing Vulnerability Scanning Proxy

8.8 Very Good

9

Black Duck Hub (Synopsys)

Black Duck Hub, now part of Synopsys, is a powerful, enterprise-grade open source management platform. It provides compr...

Commercial License Policy Management Sbom License Risk

8.7 Very Good

10

DeepCode (Snyk)

DeepCode, now integrated into the Snyk platform, uses a massive knowledge base of open-source code to identify security...

Security Static Analysis Debugging AI Engine

8.7 Very Good

11

Snyk Code

Snyk Code is a developer-first security tool that uses AI to find and fix vulnerabilities in real-time. It is specifical...

Security SAAS Vulnerability Scanning Sast

8.6 Very Good

12

Checkmarx (One)

Checkmarx is a heavyweight in the application security space. While it is primarily an enterprise tool, it offers a free...

Security Enterprise Compliance Vulnerability Scanning

8.6 Very Good

13

Checkmarx

Checkmarx is a heavyweight in the application security space, offering comprehensive SAST, DAST, and SCA solutions. Its...

Security Enterprise SAAS Compliance

8.5 Very Good

14

ClearlyDefined

ClearlyDefined focuses on providing a centralized Software Bill of Materials (SBOM) and supply chain security data. It a...

Sbom Supply Chain Security License Management Vulnerability Data

8.3 Very Good

15

Dependency-Track

Dependency-Track is an open-source, Java-based application for tracking software dependencies and identifying vulnerabil...

Java Based Vulnerability Management Open Source Intelligence Sbom

8.2 Very Good

16

OpenSCM

OpenSCM is a command-line tool for open source license compliance management. It analyzes project dependencies, identifi...

Reporting Open Source Command Line Scm

8.1 Very Good

17

Snyk Cloud

Snyk Cloud is a cloud-based platform for security and dependency management, offering tools to identify and mitigate vul...

Security Cloud Based Dependency Management Vulnerability Scanning

8.1 Very Good

18

Avast Business Security Pro

Avast Business Security Pro offers cloud-based management and robust protection against malware, ransomware, and other t...

Firewall Ransomware Shield Behavioral Analysis Vulnerability Scanning

7.9 Good

19

UpGuard

UpGuard focuses on cybersecurity risk and vendor risk management. It provides continuous security ratings for vendors an...

Threat Intelligence Continuous Monitoring Vendor Risk Vulnerability Scanning

7.9 Good

20

Lynis

Lynis is an open-source security auditing tool, not strictly an antivirus, but crucial for system hardening. It performs...

Open Source Command Line Security Audit Vulnerability Scanning

7.9 Good