Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard

Best OWASP dep-scan Alternatives in 2026

Updated

20 tools from software composition analysis software ranked against OWASP dep-scan on the same published basis.

  1. 1
    Sonatype Nexus Repository Free plan apiLinuxMacself-hostedWeb $162.50/mo8.0
    OWASP dep-scan vs Sonatype Nexus Repository
  2. 2
    Xygeni Free plan apiextensionLinuxMacself-hosted Free7.8
    OWASP dep-scan vs Xygeni
  3. 3
    Safety CLI Free plan LinuxMacself-hostedWin $25/mo7.6
    OWASP dep-scan vs Safety CLI
  4. 4
    Snyk Open Source Free plan apiLinuxMacWebWin $25/mo7.6
    OWASP dep-scan vs Snyk Open Source
  5. 5
    Docker Desktop Free plan LinuxMacWebWin $9/mo7.5
    OWASP dep-scan vs Docker Desktop
  6. 6
    Socket Free plan apiextensionLinuxMacself-hosted $25/mo7.5
    OWASP dep-scan vs Socket
  7. 7
    FOSSA Free plan apiLinuxself-hostedWeb $168392.50/mo7.4
    OWASP dep-scan vs FOSSA
  8. 8
    OpenSCA Free plan extensionLinuxMacself-hostedWeb Free7.4
    OWASP dep-scan vs OpenSCA
  9. 9
    Veracode DAST Free trial apiLinuxMacWebWin 7.4
    OWASP dep-scan vs Veracode DAST
  10. 10
    Accessibility Test Framework for Android Free plan AndroidLinuxMacWin Free7.3
    OWASP dep-scan vs Accessibility Test Framework for Android
  11. 11
    Endor Labs Free plan apiLinuxMacWebWin Free7.3
    OWASP dep-scan vs Endor Labs
  12. 12
    Semgrep Supply Chain Free plan apiLinuxMacself-hostedWeb $30/mo7.3
    OWASP dep-scan vs Semgrep Supply Chain
  13. 13
    Trivy Free plan LinuxMacself-hostedWin Free7.3
    OWASP dep-scan vs Trivy
  14. 14
    Grype Free plan LinuxMacself-hostedWin Free7.2
    OWASP dep-scan vs Grype
  15. 15
    ReversingLabs Cloud Sandbox AndroidapiLinuxMacWeb 7.2
    OWASP dep-scan vs ReversingLabs Cloud Sandbox
  16. 16
    OWASP Amass Free plan LinuxMacself-hostedWin Free7.1
    OWASP dep-scan vs OWASP Amass
  17. 18
    OSS Review Toolkit Free plan LinuxMacself-hostedWin Free7.0
    OWASP dep-scan vs OSS Review Toolkit
  18. 19
    OSV-Scanner Free plan LinuxMacself-hostedWin Free7.0
    OWASP dep-scan vs OSV-Scanner
  19. 20
    bundler-audit Free plan LinuxMac Free6.9
    OWASP dep-scan vs bundler-audit
  20. 21
    ComplyVigilance SCA Free plan apiself-hostedWeb €10/mo6.9
    OWASP dep-scan vs ComplyVigilance SCA

OWASP dep-scan alternatives compared

#ToolScoreFree planFromRuns on
1Sonatype Nexus Repository8.0Free plan$162.50/moAPI, Linux, Mac, self-hosted, Web, Windows
2Xygeni7.8Free planFreeAPI, Browser, Linux, Mac, self-hosted, Web, Windows
3Safety CLI7.6Free plan$25/moLinux, Mac, self-hosted, Windows
4Snyk Open Source7.6Free plan$25/moAPI, Linux, Mac, Web, Windows
5Docker Desktop7.5Free plan$9/moLinux, Mac, Web, Windows
6Socket7.5Free plan$25/moAPI, Browser, Linux, Mac, self-hosted, Web, Windows
7FOSSA7.4Free plan$168392.50/moAPI, Linux, self-hosted, Web
8OpenSCA7.4Free planFreeBrowser, Linux, Mac, self-hosted, Web, Windows
9Veracode DAST7.4No—API, Linux, Mac, Web, Windows
10Accessibility Test Framework for Android7.3Free planFreeAndroid, Linux, Mac, Windows
11Endor Labs7.3Free planFreeAPI, Linux, Mac, Web, Windows
12Semgrep Supply Chain7.3Free plan$30/moAPI, Linux, Mac, self-hosted, Web
13Trivy7.3Free planFreeLinux, Mac, self-hosted, Windows
14Grype7.2Free planFreeLinux, Mac, self-hosted, Windows
15ReversingLabs Cloud Sandbox7.2No—Android, API, Linux, Mac, Web, Windows
16OWASP Amass7.1Free planFreeLinux, Mac, self-hosted, Windows
18OSS Review Toolkit7.0Free planFreeLinux, Mac, self-hosted, Windows
19OSV-Scanner7.0Free planFreeLinux, Mac, self-hosted, Windows
20bundler-audit6.9Free planFreeLinux, Mac
21ComplyVigilance SCA6.9Free plan€10/moAPI, self-hosted, Web
Make your tool an alternative to OWASP dep-scan

The sponsored alternative slot on this page is labelled Sponsored.

See the price

Questions about OWASP dep-scan alternatives

What is the best alternative to OWASP dep-scan?

Sonatype Nexus Repository, number 1 in software composition analysis software with a score of 8.0 out of 10. The others here: Xygeni, Safety CLI, Snyk Open Source and 16 more.

What is the best free alternative to OWASP dep-scan?

Sonatype Nexus Repository is the best-ranked alternative with a free plan. 18 of the 20 alternatives here publish a free plan on their own pricing pages.

How are these alternatives ranked?

Ranked on what each maker publishes, the fullest spec sheet first: how deeply the product is documented, the platforms it runs on, a free tier or trial to test it, and its standing.