Best Software Composition Analysis Software in 2026
Updated
65 software composition analysis software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
65ranked
0free plans on this page
4 Oct 2026last checked
Input list Software Composition Analysis Software 15 channels on this page · 63 of 120 spec lines stated by the makers
Ch Tool Free planPaid fromSupported ecosystemsSBOM generationReachability analysisPull request scanningMonitored projectsDeployment options Spec sheet Score
51 deppbot Free planYesPaid fromnot statedSupported ecosystemsRubyGems, Bundler, Gemfile, Gemfile.lockSBOM generationnot statedReachability analysisnot statedPull request scanningnot statedMonitored projects1 projectsDeployment optionscloud 4/8spec lines stated 5.7
52 Insignary Clarity Free planNoPaid fromnot statedSupported ecosystemsnot statedSBOM generationYesReachability analysisYesPull request scanningnot statedMonitored projects1 projectsDeployment optionshybrid 5/8spec lines stated 5.7
53 MergeBase Free planNoPaid fromnot statedSupported ecosystemsJava/Maven/Gradle; .NET/NuGet; Go; JavaScript/NPM/Yarn; PHP/Composer; Elixir/Hex; Python/PIP; Dart/Pub; Ruby/Gem; Swift/Swift Package Manager/CocoaPods; Rust/Cargo; C/C++/CMake/Make/Vcpkg/ConanSBOM generationYesReachability analysisnot statedPull request scanningYesMonitored projectsnot statedDeployment optionshybrid 5/8spec lines stated 5.7
54 Retire.js Free planYesPaid fromnot statedSupported ecosystemsJavaScript; Node.js modules; npmSBOM generationYesReachability analysisnot statedPull request scanningnot statedMonitored projectsnot statedDeployment optionsself hosted 4/8spec lines stated 5.7
55 SBOM Studio Free plannot statedPaid fromnot statedSupported ecosystemsnot statedSBOM generationYesReachability analysisnot statedPull request scanningnot statedMonitored projectsnot statedDeployment optionscloud 2/8spec lines stated 5.7
56 ts-scan Free planYesPaid fromnot statedSupported ecosystemsMaven, Gradle, npm, PyPI, NuGet, Dart, Visual Basic 6, Go, Docker/SyftSBOM generationYesReachability analysisNoPull request scanningNoMonitored projectsnot statedDeployment optionsself hosted 6/8spec lines stated 5.7
57 VersionEye Free planNoPaid fromnot statedSupported ecosystemsPython, Ruby, Node.js, PHP; npm, Composer, Bundler, pipSBOM generationNoReachability analysisNoPull request scanningNoMonitored projectsnot statedDeployment optionscloud 6/8spec lines stated 5.7
58 ComplyVigilance SCA Free plannot statedPaid fromnot statedSupported ecosystemsnpm, yarn, pip, PyPI, Poetry, Maven, Gradle, NuGet, Cargo, Go Modules, vcpkg, Conan, Pkg.jl, Hardhat, Truffle, Foundry, Docker Hub, OCI registries; C, C++, C#, Java, Python, JavaScript, TypeScript, Go, Rust, Solidity, JuliaSBOM generationYesReachability analysisnot statedPull request scanningnot statedMonitored projectsnot statedDeployment optionscloud 3/8spec lines stated 5.6
59 depproof Free planYesPaid fromnot statedSupported ecosystemsMaven, Gradle, npm, pnpm, yarn, bun, PyPI, Go modulesSBOM generationYesReachability analysisnot statedPull request scanningYesMonitored projectsnot statedDeployment optionsself hosted 5/8spec lines stated 5.6
60 lockhawk Free planYesPaid fromnot statedSupported ecosystemsnpm, Yarn, pnpmSBOM generationNoReachability analysisNoPull request scanningnot statedMonitored projectsnot statedDeployment optionsself hosted 5/8spec lines stated 5.6
61 OpenHack Supply Chain Free planYesPaid fromnot statedSupported ecosystemsnpm, PyPISBOM generationYesReachability analysisnot statedPull request scanningYesMonitored projectsnot statedDeployment optionshybrid 5/8spec lines stated 5.6
62 govulncheck Free plannot statedPaid fromnot statedSupported ecosystemsGoSBOM generationYesReachability analysisYesPull request scanningnot statedMonitored projectsnot statedDeployment optionsself hosted 4/8spec lines stated 5.5
63 pip-audit Free planYesPaid fromnot statedSupported ecosystemsPython packages; pip; requirements files; pyproject.toml; pylock.*.tomlSBOM generationYesReachability analysisnot statedPull request scanningnot statedMonitored projectsnot statedDeployment optionsself hosted 4/8spec lines stated 5.5
64 Sandworm Audit Free planYesPaid fromnot statedSupported ecosystemsnpm, Yarn, pnpm, ComposerSBOM generationNoReachability analysisnot statedPull request scanningnot statedMonitored projectsnot statedDeployment optionsself hosted 4/8spec lines stated 5.5
65 Clair Free planYesPaid fromnot statedSupported ecosystemsnot statedSBOM generationnot statedReachability analysisnot statedPull request scanningnot statedMonitored projectsnot statedDeployment optionsnot stated 1/8spec lines stated 5.0
More in Developer Tools
All developer tools listsAccessibility Testing Software 168Log Management Software 107AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Browser Automation Tools 63Integrated Development Environments 62Artifact repository software 60Code Playground Software 58Network Monitoring 56Version Control Software 54