Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitGrype vs OpenHack Supply Chain
OpenHack Supply Chain
6.1#34 in software composition analysis softwareFree planFree planWebSelf-hosted
VisitWhat both publish
| Fact | Grype | OpenHack Supply Chain |
|---|---|---|
| Intended users | The project documentation describes individual package scanning as useful for lightweight vulnerability checks and compliance scanning of specific dependencies. | The product page describes reports for security reviewers and enterprise buyers, while the pricing page presents plans for startups and enterprises. |
| Purpose | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. | OpenHack Supply Chain combines software composition analysis and supply chain intelligence to find vulnerable dependencies and identify malicious dependencies. |
Grype plans
- GrypeFree
- Grype open-source scannerFree
OpenHack Supply Chain plans
- Free (Pay as you go)Free
- EnterprisePriced on request
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.
Pick OpenHack Supply Chain if…
You want what its maker publishes above — check its page for the details.