Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
Visit
| Fact | Grype | ManageEngine Vulnerability Manager Plus |
|---|---|---|
| Company founded | Anchore says Saïd Ziouani and Daniel Nurmi opened the company in 2016. | Gartner lists ManageEngine's founding year as 2002. |
| Company headquarters | Anchore is headquartered in Santa Barbara, California. | LinkedIn lists headquarters at Del Valle, Texas, United States. |
| Company size | LinkedIn lists Anchore at 51–200 employees. | LinkedIn lists ManageEngine as having 5,001–10,000 employees. |
| Founded | 2016 | 1996 |
| Headquarters | Santa Barbara, California, United States | Pleasanton, California, United States |
| Integrations | The installation documentation provides a Docker image and lists community installation options including Homebrew, MacPorts, Winget, Scoop, and Snapcraft. | The integrations page advertises endpoint-vulnerability ingestion, endpoint-management workflows and forwarding audit logs to SIEM tools. |
| Licence | Grype is released under the permissive Apache-2.0 licence; its logo uses CC BY 4.0. | The EULA restricts copying, sublicensing, modification, reverse engineering and third-party access, indicating proprietary commercial software rather than open source. |
| Purpose | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. | The product identifies and assesses vulnerabilities across a network and helps remediate them. |
| Risk prioritization | Results can be sorted by severity, EPSS, KEV and risk scoring. | It prioritizes vulnerabilities using AI-based risk scores, CVSS severity, EPSS, and active attack trends. |
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.
It suits teams that need to assess vulnerabilities, prioritize remediation, and manage patches across Windows and Linux systems. Teams using macOS should note that the listed support there is limited to patch management.