AppSecNews

SCA

Software Composition Analysis

Identify open-source dependencies and match them against known vulnerability and license data.

28 tools profiled

How it differs Checks the open source packages you depend on for known vulnerabilities and license obligations. Flaws in code you wrote are SAST territory.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Snippet Matching Clear all

  • Revenera FlexNet Code Insight

    Revenera

    SCA

    Compliance oriented composition analysis that combines dependency scanning with source snippet matching against a large open source knowledge base, wrapped in a legal review workflow.

    Commercial
    Established

  • SCANOSS

    SCANOSS

    SCA

    Open source composition analysis engine that fingerprints code at snippet level using winnowing hashes and matches it against a knowledge base you can query as a service or host yourself.

    Freemium
    Growing

  • Revenera FlexNet Code Insight

    Revenera

    Compliance oriented composition analysis that combines dependency scanning with source snippet matching against a large open source knowledge base, wrapped in a legal review workflow.

    Commercial Established
    SCA

  • SCANOSS

    SCANOSS

    Open source composition analysis engine that fingerprints code at snippet level using winnowing hashes and matches it against a knowledge base you can query as a service or host yourself.

    Freemium Growing
    SCA
Tick up to 4 tools above.