17.7
Sonatype Nexus Repository stores, manages, and distributes packages, components, applications, AI/ML models, and build artifacts.
Free planWebAPILinux
Alternatives to sbomify
sbomify combines SBOM generation, analysis, management, and compliance-document sharing in one security artifact hub. It handles CycloneDX and SPDX, supports 17 ecosystems plus container images, directory scans, and Yocto/OpenEmbedded builds, and connects Google OSV and OWASP Dependency-Track for vulnerability analysis. Trust Centers share SBOMs, VEX and CBOM artifacts, certifications, penetration-test reports, and compliance attestations through public or private access,…
27.1
Ortelius connects software bills of materials (SBOMs) with Helm and deployment metadata to map open-source packages and versions to deployed endpoints.
Free planWebAPISelf-hosted
36.9
FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the development lifecycle.
Free planWebAPILinux
- 4
ReARM
ReARM is a release governance platform for tracking software composition, security posture, shipment clearance, supporting evidence, and what shipped.
Free planWebAPISelf-hosted6.9From $75 a month - 5
Exodos Labs
Exodos Labs is a platform for tracking, exchanging, and automating software bills of materials (SBOMs) across the software supply chain.
Free planWebAPISelf-hosted6.7From $29 a month - 6
Codenotary Trustcenter
Codenotary Trustcenter provides AI-driven trust enforcement for applications and their components.
WebAPILinuxmacOS6.6From $3,600 a month - 7
Lineaje SBOM360
Lineaje SBOM360 is a web-based software-as-a-service product for finding and addressing software supply chain security issues across development.
Web6.5From $150,000 a month - 8
Interlynk
Interlynk manages software bills of materials (SBOMs) for regulated software and devices.
Free planWebAPILinuxmacOS6.4Free plan - 9
Anchore Enterprise
WebAPILinuxSelf-hosted6.2 - 10
OWASP Dependency-Track
OWASP Dependency-Track is a free, open-source platform for inventorying software components from SBOMs, identifying vulnerabilities, and enforcing supply-chain policies.
Free planWebAPISelf-hosted6.2Free plan - 11
CAST SBOM Manager
CAST SBOM Manager analyzes source code and creates Software Bills of Materials (SBOMs) for tracking software components and related information.
Free planLinuxWindows6.0Free plan - 12
OTNOS SBOM 360
OTNOS SBOM 360 helps operational technology manufacturers ingest, analyze, monitor and report software products in response to the Cyber Resilience Act.
Free planWebAPI6.0Free plan - 13
Revenera SBOM Insights
Revenera SBOM Insights is a paid SaaS cloud inventory management solution for maintaining a complete software bill of materials.
WebAPILinuxWindows6.0 - 14
TRUSCA
TRUSCA is a self-hosted software composition analysis platform for CVE tracking, license compliance, and SBOM management.
Free planWebAPILinuxSelf-hosted6.0Free plan - 15
SBOM Manager
SBOM Manager is a free, MIT-licensed command-line tool for Linux that organizes Software Bills of Materials.
Free planLinux5.8Free plan - 16
SBOM Studio
SBOM Studio is a cloud, web-based enterprise platform for managing software bills of materials and supply-chain risk across a product lifecycle.
Web5.7 - 17
SBOMApp
SBOMApp helps enterprises generate, analyze, govern, remediate, and share software bills of materials across the development lifecycle.
WebAPIExtensionLinux5.7 - 18
Aptori SBOM Management
Aptori SBOM Management creates and governs software bills of materials across the software lifecycle.
WebAPISelf-hosted5.3 - 19
Cybellum Platform
Cybellum Platform helps manufacturers manage security and compliance for connected products across development and product operation.
WebAPISelf-hosted5.3 - 20
sbomasm
sbomasm is a free, self-hosted toolkit for managing software bills of materials (SBOMs), from assembly and metadata updates to cleanup, enrichment,…
LinuxmacOS5.2 - 214.6