Best Software Composition Analysis Software in 2026
Updated
64 software composition analysis software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
64ranked
0free plans on this page
4 Oct 2026last checked
- Web
- Free plan
- No
- Supported ecosystems
- Java, JavaScript, PHP, Python, Go, Rust, Ruby, Dart, C/C++, Elixir, CycloneDX, SPDX
- SBOM generation
- Yes
- Reachability analysis
- Yes
RecognisedDocumentedFree planPlatforms - WebLinux
- Free plan
- No
- Supported ecosystems
- RPM, DEB, APK, ALPM, Portage, Microsoft KB patches, C/C++, Dart, .NET, Elixir, Erlang, Go, Haskell, Java, JavaScript, Jenkins Plugins, Lua, Nix, Objective-C, OCaml, PHP, Python, R, Ruby, Rust, Swift, SWI-Prolog, Bitnami, GitHub Actions, Homebrew, Terraform, WordPress plugins
- SBOM generation
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Supported ecosystems
- npm, yarn, pip, PyPI, Poetry, Maven, Gradle, NuGet, Cargo, Go Modules, vcpkg, Conan, Pkg.jl, Hardhat, Truffle, Foundry, Docker Hub, OCI registries; C, C++, C#, Java, Python, JavaScript, TypeScript, Go, Rust, Solidity, Julia
- SBOM generation
- Yes
RecognisedDocumentedFree planPlatforms -
- Free plan
- Yes
- Supported ecosystems
- Maven, Gradle, npm, pnpm, yarn, bun, PyPI, Go modules
- SBOM generation
- Yes
- Pull request scanning
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- No
- SBOM generation
- Yes
- Reachability analysis
- Yes
RecognisedDocumentedFree planPlatforms -
- Free plan
- Yes
- Supported ecosystems
- npm, Yarn, pnpm
- SBOM generation
- No
- Reachability analysis
- No
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- No
- Supported ecosystems
- Java/Maven/Gradle; .NET/NuGet; Go; JavaScript/NPM/Yarn; PHP/Composer; Elixir/Hex; Python/PIP; Dart/Pub; Ruby/Gem; Swift/Swift Package Manager/CocoaPods; Rust/Cargo; C/C++/CMake/Make/Vcpkg/Conan
- SBOM generation
- Yes
- Pull request scanning
- Yes
RecognisedDocumentedFree planPlatforms -
- Free plan
- Yes
- Supported ecosystems
- npm, PyPI
- SBOM generation
- Yes
- Pull request scanning
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- No
- Supported ecosystems
- Python, Ruby, Node.js, PHP; npm, Composer, Bundler, pip
- SBOM generation
- No
- Reachability analysis
- No
- Pull request scanning
- No
RecognisedDocumentedFree planPlatforms -
- Supported ecosystems
- Go
- SBOM generation
- Yes
- Reachability analysis
- Yes
RecognisedDocumentedFree planPlatforms -
- Free plan
- Yes
- Supported ecosystems
- Python packages; pip; requirements files; pyproject.toml; pylock.*.toml
- SBOM generation
- Yes
RecognisedDocumentedFree planPlatforms -
- Free plan
- Yes
- Supported ecosystems
- npm, Yarn, pnpm, Composer
- SBOM generation
- No
RecognisedDocumentedFree planPlatforms - LinuxmacOSWindowsRecognisedDocumentedFree planPlatforms
-
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 55Version Control Software 54




















