Keysight SBOM Manager vs OWASP Dependency-Track
Keysight SBOM Manager
keysight.com
OWASP Dependency-Track
dependencytrack.orgSide by side
| Figure | Keysight SBOM Manager | OWASP Dependency-Track |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 5 | 1 |
| Spec score · SBOM Management Software | 6.0 (#21) | 7.7 (#11) |
Plans
Keysight SBOM Manager
- SBOM Studio license for a single licensed Studio SBOMPriced on request
- SBOM Studio/Consumer Module single-tenant addonPriced on request
- SBOM Studio/Consumer ModulePriced on request
- SBOM Generation Module per single scanPriced on request
- SBOM Consumer Module for a single licensed Consumer SBOMPriced on request
In their own words
Keysight SBOM Manager
Keysight SBOM Manager has no write-up on Specifiction yet; its figures are above.
OWASP Dependency-Track
OWASP Dependency-Track is a free, self-hosted platform for managing software-component risk across a supply chain. It builds inventories from software bills of materials and identifies vulnerable components, supporting CycloneDX SBOM, HBOM, VEX, and VDR documents for ingestion, analysis, and production. Components can be matched against NVD, GitHub Advisories, OSV, OSS Index, Snyk, Trivy, and VulnDB, while integrated EPSS support helps prioritize mitigation. Integrity checks flag components when published hashes differ from those served by an upstream registry. A Common Expression Language policy engine evaluates component rules and can break a build when a policy fails. Alerts can be filtered by event fields and sent to Slack, Teams, Mattermost, email, or webhooks. API and web interfaces are available, with least-privilege portfolio access and single sign-on through OpenID Connect, Active Directory, and LDAP. Version 5.1 uses separate API and frontend container images, supports Kubernetes, and requires PostgreSQL.