Subcategory

Dependency auditing

21 tools
AI-Audit
open-source

AI-native security auditing CLI for compliance reporting

Checkmarx SCA
paid

Software composition analysis with agentic AI remediation

Debricked
freemium

Machine-learning software composition analysis for dependency security and license compliance

DepsHub
freemium

AI-powered dependency management and automated updates

Lineaje
paid

Agentic AI for continuous software supply chain security and SBOM management

Mend
paid

Unified application and AI security platform with SCA, SAST, and AI-powered remediation

Mend.io
paid

AI-assisted application security platform combining SCA, SAST, and AI security

NPMScan
freemium

Malicious npm package detection with AI-powered threat intelligence

OX Security
paid

Active ASPM platform with AI-driven prioritization from code to cloud

Panto AI
freemium

AI code review agent that analyzes pull requests for quality, security, and business context

Phylum
paid

Software supply chain risk analysis with ML-based malicious package detection

Rafter
freemium

SaaS security platform that scans SAST, SCA, and secrets on every commit

Snyk
freemium

Developer-first security platform for finding and fixing open-source vulnerabilities

Socket
freemium

Supply chain security that blocks malicious dependencies at install time

Sonar SCA
paid

SCA built into SonarQube with AI CodeFix for vulnerable dependencies

Sonatype Lifecycle
paid

Enterprise SCA with AI-generated upgrade pull requests

StepSecurity
freemium

Supply chain attack detection for GitHub Actions and OSS packages

TheAuditor
open-source

Offline security scanner built for AI-generated code

Trace-AI
freemium

Predictive supply-chain security using metadata analysis of dependencies and maintainers

Vigolium
open-source

Open-source vulnerability scanner combining deterministic scanning with LLM-driven code auditing

Vulert
freemium

AI-driven SCA that monitors manifests without code access