Grype
7.4#2 in software composition analysis softwareFree planFree planLinuxmacOSSelf-hostedWindows
VisitGrype vs Sonatype Container Scanner
Sonatype Container Scanner
5.3#22 in container image scanning toolsAPILinuxSelf-hostedWindows
VisitWhat both publish
| Fact | Grype | Sonatype Container Scanner |
|---|---|---|
| Founded | 2016 | Sonatype's company timeline says it began in 2001 as a project by core contributors to Apache Maven. |
| Headquarters | Santa Barbara, California, United States | Sonatype lists its headquarters at 8161 Maple Lawn Blvd #250, Fulton, Maryland 20759, United States. |
Grype plans
- GrypeFree
- Grype open-source scannerFree
Sonatype Container Scanner plans
- Sonatype Container ScannerPriced on request
Pick Grype if…
Grype suits developers and teams checking packages, images, filesystems, or SBOMs for known vulnerabilities. Its individual-package scanning is also intended for lightweight checks and compliance reviews of specific dependencies.
Pick Sonatype Container Scanner if…
You want what its maker publishes above — check its page for the details.