GUAC
7.5#2 in software supply chain security softwareFree planFree planWebAPILinuxmacOS
VisitGUAC vs Wisec
What both publish
| Fact | GUAC | Wisec |
|---|---|---|
| Purpose | GUAC ingests software metadata such as SBOMs and maps relationships between software to provide supply chain security insights. | Wisec collects, signs, and preserves software build evidence such as provenance, SBOM, SLSA, and VEX for Cyber Resilience Act readiness. |
| Self-hosting | GUAC is deployed locally or in user-controlled infrastructure with Docker Compose and optional PostgreSQL persistence. | Self-hosting is available to Enterprise customers, with on-premise or private cloud deployment listed. |
GUAC plans
- GUAC (open-source project)Free
- Open-source GUACFree
Wisec plans
- FreeFree
- Business€990 a year
- Pro€2,990 a year
- EnterprisePriced on request
Pick GUAC if…
GUAC suits development, operations, and security teams, as well as Open Source Program Offices, that need to explore software dependencies across a portfolio. It is relevant to teams already working with SBOMs and able to meet its Docker-based setup prerequisites.
Pick Wisec if…
The Free plan is described for small projects and security exploration; Business is for growing teams that need notarization. Pro is aimed at organizations seeking full control, while Enterprise adds self-hosting options.