Software Composition Analysis
Tools for analyzing software components, especially open source, to detect vulnerabilities and license compliance issues.
Updated June 14, 2026
Products that define this theme
A representative set of Dynamic Application Security Testing (DAST) Software products that exemplify Software Composition Analysis, curated as a starting point for finding similar software.
Selected from G2's verified user reviews and ratings, then matched to this theme for relevance.
How Did G2 Choose These Software Composition Analysis Products?
The 7 products shown represent a defining sample for the "Software Composition Analysis" theme within Dynamic Application Security Testing (DAST) Software on G2 — not an exhaustive list. They are a curated starting point for discovering similar software.
- Sourced from products with verified G2 user reviews and ratings.
- Matched to this theme based on each product's described capabilities and fit, ordered by relevance.
- Rankings and inclusion are unbiased and are not influenced by vendor payment.
Refreshed weekly. Last updated: June 14, 2026.
Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido...
Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while...
GitLab is the most comprehensive AI-Powered DevSecOps platform that enables software innovation by empowering development, security, and operations teams to build better software, faster. With...
Jit is redefining application security by introducing the first Agentic AppSec Platform, seamlessly blending human expertise with AI-driven automation. Designed for modern development teams, Jit...
HCL AppScan is a comprehensive suite of market-leading application security testing solutions (SAST, DAST, IAST, SCA, API), available on-premises and on-cloud. These powerful DevSecOps tools...
SOOS is the complete application security posture management platform. Scan your software for vulnerabilities, control the introduction of new dependencies, exclude unwanted license types, generate...
DerScanner is a complete application security testing solution to eliminate known and unknown code threats across Software Development Lifecycle. DerScanner static code analysis offers developers...