Alternatives and similar repositories for DependencyCheck

Users that are interested in DependencyCheck are comparing it to the libraries listed below

• find-sec-bugs / find-sec-bugs
  The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala proje…
  ☆2,402Updated 7 months ago
• DependencyTrack / dependency-track
  Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supp…
  ☆3,523Updated this week
• spotbugs / spotbugs
  SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
  ☆3,803Updated this week
• dependency-check / dependency-check-sonar-plugin
  Integrates Dependency-Check reports into SonarQube
  ☆680Updated 2 months ago
• RetireJS / retire.js
  scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
  ☆4,047Updated last week
• google / osv-scanner
  Vulnerability scanner written in Go which uses the data provided by https://osv.dev
  ☆8,344Updated this week
• zaproxy / zaproxy
  The ZAP by Checkmarx Core project
  ☆14,632Updated this week
• Yelp / detect-secrets
  An enterprise friendly way of detecting and preventing secrets in code.
  ☆4,371Updated 10 months ago
• mbechler / marshalsec
  ☆3,649Updated last year
• andresriancho / w3af
  w3af: web application attack and audit framework, the open source web vulnerability scanner.
  ☆4,842Updated 2 years ago
• anchore / grype
  A vulnerability scanner for container images and filesystems
  ☆11,349Updated this week
• frohoff / ysoserial
  A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
  ☆8,696Updated last month
• testssl / testssl.sh
  Testing TLS/SSL encryption anywhere on any port
  ☆8,815Updated this week
• flipkart-incubator / Astra
  Automated Security Testing For REST API's
  ☆2,627Updated last year
• archerysec / archerysec
  ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.
  ☆2,429Updated 7 months ago
• fuzzdb-project / fuzzdb
  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  ☆8,781Updated 2 years ago
• SonarSource / sonarqube
  Continuous Inspection
  ☆10,164Updated last week
• rbsec / sslscan
  sslscan tests SSL/TLS enabled services to discover supported cipher suites
  ☆2,567Updated last month
• wireghoul / graudit
  grep rough audit - source code auditing tool
  ☆1,666Updated last month
• pmd / pmd
  An extensible multilanguage static code analyzer.
  ☆5,287Updated this week
• Arachni / arachni
  Web Application Security Scanner Framework
  ☆3,983Updated 7 months ago
• infobyte / faraday
  Open Source Vulnerability Management Platform
  ☆6,097Updated last month
• DefectDojo / django-DefectDojo
  Open-Source Unified Vulnerability Management, DevSecOps & ASPM
  ☆4,440Updated this week
• greenbone / openvas-scanner
  This repository contains the scanner component for Greenbone Community Edition.
  ☆4,339Updated this week
• google / osv.dev
  Open source vulnerability DB and triage service.
  ☆2,451Updated this week
• Checkmarx / kics
  Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…
  ☆2,558Updated this week
• michenriksen / gitrob
  Reconnaissance tool for GitHub organizations
  ☆6,111Updated 3 years ago
• anchore / syft
  CLI tool and library for generating a Software Bill of Materials from container images and filesystems
  ☆8,212Updated this week
• OWASP-Benchmark / BenchmarkJava
  OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web…
  ☆767Updated this week
• microsoft / restler-fuzzer
  RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security…
  ☆2,856Updated this week