Grype
7.4#3 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitGrype vs Socket
Socket
7.2#6 in software composition analysis softwareFrom $25 a monthFree planWebAPIExtensionLinux
VisitWhat both publish
| Fact | Grype | Socket |
|---|---|---|
| Founded | 2016 | 2021 |
| Headquarters | Santa Barbara, California, United States | San Francisco, California, United States |
| Integrations | The installation documentation provides a Docker image and lists community installation options including Homebrew, MacPorts, Winget, Scoop, and Snapcraft. | Socket lists integrations including AWS CodePipeline, Azure Pipelines, Bitbucket Pipelines, CircleCI, Jenkins, Vanta, and Drata. |
Grype plans
- GrypeFree
- Grype open-source scannerFree
Socket plans
- Team$25 a month
- Business$50 a month
- EnterprisePriced on request
- Free—
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.
Pick Socket if…
Socket is for development teams that want dependency checks in pull requests, package installation, or custom workflows. Its free plan also serves open-source projects and includes a limited monthly scan allowance.