17.6
DeepFilterNet is a free, open-source speech enhancement framework for full-band 48 kHz audio that uses deep filtering.
Free planOpen sourceAPILinuxmacOS
Best Software Composition Analysis Software in 2026
Software composition analysis software helps you evaluate the components and dependencies used in software projects. Compared on deployment options, free plans, monitored projects, paid-from prices, pull request scanning, reachability analysis, SBOM generation and supported ecosystems, these entries offer several concrete points for assessing fit. Consider which ecosystems your team uses, how many projects need…
27.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
37.4
Grype is a free, Apache-2.0-licensed vulnerability scanner for container images, filesystems, SBOMs, and individual packages.
Free planOpen sourceLinuxmacOSSelf-hosted
- 4
Scantist
Scantist covers application security, software supply chain risk, and security for AI agents and LLM-powered products.
Free planWebAPISelf-hosted7.3$200 one-time - 5
Snyk Open Source
Snyk Open Source is a software composition analysis tool for finding and addressing security vulnerabilities and license issues in open source dependencies.
Free planWebAPILinuxmacOS7.3From $25 a month - 6
Socket
Socket is a developer-first security platform for finding and blocking vulnerable or malicious software dependencies.
Free planWebAPIExtensionLinux7.2From $25 a month - 7
DepWarden
DepWarden is a software composition analysis tool for scanning dependency manifests against vulnerability, exploitability, supply-chain, package…
Free planWebAPILinuxmacOS7.1From $19 a month - 8
Mend SCA
Mend SCA helps development, security, and legal teams identify, prioritize, and remediate security and license risks in open source components.
WebAPILinuxmacOS7.0From $250 a year - 9
ScanCode.io
ScanCode.io provides a web interface and API for running and reviewing software composition analysis scans in scripted pipelines.
Free planWebAPILinuxmacOS7.0Free plan - 10
Semgrep Supply Chain
Semgrep Supply Chain helps development teams identify vulnerabilities in open-source dependencies, detect malicious packages, and assess whether…
Free planWebAPILinuxmacOS7.0From $30 a month - 11
Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 12
Retire.js
Retire.js is a free, open-source scanner for finding JavaScript libraries and Node.js modules with known vulnerabilities.
Free planWebAPIExtensionLinux6.8Free plan - 13
Twira Dependency Vulnerabilities
Twira Dependency Vulnerabilities scans software lockfiles for known vulnerabilities and filters results through installed-package and code-import reachability checks.
Free planAPILinuxmacOSSelf-hosted6.8From $29.99 a month - 14
Eclipse Steady
Eclipse Steady analyzes Java and Python applications for dependencies on open-source components with known vulnerabilities.
Free planWebAPILinuxmacOS6.7Free plan - 15
ComplyVigilance SCA
Free planWebAPISelf-hosted6.6From €120 a year - 16
Meterian BOSS
Free planWebAPI6.6From £2,300 a year - 17
SafeDep vet
Free planLinuxmacOSSelf-hosted6.6From $100 a month - 18
Safety CLI
Safety CLI detects vulnerable dependencies and helps remediate them, with scans described for Python, Java, and JavaScript.
Free planLinuxmacOSSelf-hostedWindows6.6From $25 a month - 19
Xygeni
Xygeni is an application security platform for risks across the software supply chain.
Free planWebAPIExtensionLinux6.6Free plan - 20
deppbot
Free planWeb6.5From $5 a month - 21
ZeroPath
ZeroPath is an application security platform for finding and fixing exploitable vulnerabilities across code, cloud, and runtime.
WebAPILinuxmacOS6.5From $1,000 a month - 22
FOSSA
FOSSA scans software to identify dependencies, vulnerabilities, and license issues across the development lifecycle.
Free planWebAPILinuxSelf-hosted6.4Free plan - 23
OpenSCA
OpenSCA analyzes software components and dependencies to identify vulnerabilities and open-source license risks.
Free planWebExtensionLinuxmacOS6.4Free plan - 24
Nancy
Nancy is a free, open-source command-line tool that checks Go module dependencies for vulnerabilities using Sonatype Guide.
Free planLinuxmacOSSelf-hostedWindows6.3Free plan - 25
SBOM Observer
WebAPILinuxmacOS6.3From €69 a month