Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitGrype vs OSV-Scanner
OSV-Scanner
6.0#39 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitWhat both publish
| Fact | Grype | OSV-Scanner |
|---|---|---|
| Purpose | Grype scans container images, filesystems, and SBOMs for known vulnerabilities. | OSV-Scanner finds known vulnerabilities affecting a project's dependencies using the OSV database. |
Grype plans
- GrypeFree
- Grype open-source scannerFree
OSV-Scanner plans
- OSV-ScannerFree
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.
Pick OSV-Scanner if…
OSV-Scanner suits developers and teams who want to identify known vulnerabilities in dependencies, scan containers, or check licenses. It is available for Linux, macOS, Windows, and self-hosted use.