17.7
Sonatype Nexus Repository stores, manages, and distributes packages, components, applications, AI/ML models, and build artifacts.
Free planWebAPILinux
Alternatives to Interlynk
Interlynk gives security, engineering, and compliance teams one cloud platform for generating, ingesting, enriching, monitoring, and sharing SBOMs. It covers open-source licenses, vulnerabilities, maintenance status, supplier uploads, policy enforcement, and embedded C/C++ firmware builds through lynkctl. VEX dispositions help separate applicable findings, while vulnerability data draws on NVD, GitHub Security Advisories, and OSV with EPSS, CISA KEV, and CWE enrichment. Its…
27.1
Ortelius connects software bills of materials (SBOMs) with Helm and deployment metadata to map open-source packages and versions to deployed endpoints.
Free planWebAPISelf-hosted
37.0
sbomify is a security artifact hub for creating, managing, analyzing, and sharing software bills of materials (SBOMs) and compliance documents.
Free planWebAPILinux
- 4
FOSSA
FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the development lifecycle.
Free planWebAPILinuxSelf-hosted6.9From $168,392.50 a month - 5
ReARM
ReARM is a release governance platform for tracking software composition, security posture, shipment clearance, supporting evidence, and what shipped.
Free planWebAPISelf-hosted6.9From $75 a month - 6
Exodos Labs
Exodos Labs is a platform for tracking, exchanging, and automating software bills of materials (SBOMs) across the software supply chain.
Free planWebAPISelf-hosted6.7From $29 a month - 7
Codenotary Trustcenter
Codenotary Trustcenter provides AI-driven trust enforcement for applications and their components.
WebAPILinuxmacOS6.6From $3,600 a month - 8
Lineaje SBOM360
Lineaje SBOM360 is a web-based software-as-a-service product for finding and addressing software supply chain security issues across development.
Web6.5From $150,000 a month - 9
Anchore Enterprise
WebAPILinuxSelf-hosted6.2 - 10
OWASP Dependency-Track
OWASP Dependency-Track is a free, open-source platform for inventorying software components from SBOMs, identifying vulnerabilities, and enforcing supply-chain policies.
Free planWebAPISelf-hosted6.2Free plan - 11
CAST SBOM Manager
CAST SBOM Manager analyzes source code and creates Software Bills of Materials (SBOMs) for tracking software components and related information.
Free planLinuxWindows6.0Free plan - 12
OTNOS SBOM 360
OTNOS SBOM 360 helps operational technology manufacturers ingest, analyze, monitor and report software products in response to the Cyber Resilience Act.
Free planWebAPI6.0Free plan - 13
Revenera SBOM Insights
Revenera SBOM Insights is a paid SaaS cloud inventory management solution for maintaining a complete software bill of materials.
WebAPILinuxWindows6.0 - 14
TRUSCA
TRUSCA is a self-hosted software composition analysis platform for CVE tracking, license compliance, and SBOM management.
Free planWebAPILinuxSelf-hosted6.0Free plan - 15
SBOM Manager
SBOM Manager is a free, MIT-licensed command-line tool for Linux that organizes Software Bills of Materials.
Free planLinux5.8Free plan - 16
SBOM Studio
SBOM Studio is a cloud, web-based enterprise platform for managing software bills of materials and supply-chain risk across a product lifecycle.
Web5.7 - 17
SBOMApp
SBOMApp helps enterprises generate, analyze, govern, remediate, and share software bills of materials across the development lifecycle.
WebAPIExtensionLinux5.7 - 18
Aptori SBOM Management
Aptori SBOM Management creates and governs software bills of materials across the software lifecycle.
WebAPISelf-hosted5.3 - 19
Cybellum Platform
Cybellum Platform helps manufacturers manage security and compliance for connected products across development and product operation.
WebAPISelf-hosted5.3 - 20
sbomasm
sbomasm is a free, self-hosted toolkit for managing software bills of materials (SBOMs), from assembly and metadata updates to cleanup, enrichment,…
LinuxmacOS5.2 - 214.6