OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
☆1,324Oct 30, 2026Updated this week
Alternatives and similar repositories for dep-scan
Users that are interested in dep-scan are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package manager…☆1,098Updated this week
- blint is a Binary Linter that checks the security properties and capabilities of your executables. It can also generate a Software Bill-o…☆460Updated this week
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers…☆155Oct 23, 2026Updated last week
- Scan is a free & Open Source DevSecOps tool for performing static analysis based security testing of your applications and its dependenci…☆883Sep 1, 2023Updated 3 years ago
- atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.☆100Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supp…☆4,389Updated this week
- Scans Software Bill of Materials (SBOMs) for security vulnerabilities☆629Feb 10, 2026Updated 8 months ago
- A vulnerability scanner for container images and filesystems☆13,143Updated this week
- Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.☆2,778Updated this week
- Open-Source Unified Vulnerability Management, DevSecOps & ASPM☆5,167Updated this week
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆9,799Updated this week
- Binary builds for dep-scan - The Dependency Scanner☆10Apr 1, 2024Updated 2 years ago
- A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sp…☆716Updated this week
- Vulnerability scanner written in Go which uses the data provided by https://osv.dev☆11,324Updated this week
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- A curated list of SBOM (Software Bill Of Materials) related tools, frameworks, blogs, podcasts, and articles☆602May 27, 2026Updated 5 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,572Updated this week
- Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more☆38,859Updated this week
- Utility that provides an API platform for validating, querying and managing BOM data☆168Oct 12, 2026Updated 2 weeks ago
- Dotnet Source and Assembly Inspector (Dosai) is a tool to list details about the namespaces and methods from sources and assemblies.☆14Oct 20, 2026Updated last week
- SBOM Search - Context aware search in SBOM repositories☆33Oct 5, 2026Updated 3 weeks ago
- Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time thre…☆711Aug 23, 2026Updated 2 months ago
- SessionProbe is a multi-threaded tool designed for penetration testing and bug bounty hunting. It evaluates user privileges in web applic…☆467Mar 28, 2024Updated 2 years ago
- 🔎 Static code analysis engine to find security issues in code.☆3,262Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Open source vulnerability DB and triage service.☆3,025Updated this week
- ASOC, ASPM, DevSecOps, Vulnerability Management Using ArcherySec.☆2,478Jun 11, 2025Updated last year
- A universal SBOM representation in protocol buffers☆338Oct 23, 2026Updated last week
- OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependen…☆7,755Updated this week
- Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hack…☆6,835Updated this week
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆17,360Updated this week
- Agile Threat Modeling Toolkit☆784Apr 8, 2026Updated 6 months ago
- A suite of tools to automate software compliance checks.☆2,109Updated this week
- A curated list of threat modeling resources (Books, courses - free and paid, videos, tools, tutorials and workshops to practice on ) for …☆1,831Aug 2, 2024Updated 2 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.☆2,090Sep 21, 2026Updated last month
- Multi-Cloud Security Auditing Tool☆7,863Sep 23, 2025Updated last year
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,726Updated this week
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,462Updated this week
- reNgine is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via E…☆8,909Updated this week
- The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnera…☆1,799Updated this week
- Mantis is a security framework that automates the workflow of discovery, reconnaissance, and vulnerability scanning.☆1,042Jul 7, 2026Updated 3 months ago