Software Composition Analysis (SCA)
Products that identify open source and third-party components in software to help manage risk and compliance.
Updated June 21, 2026
Products that define this theme
A representative set of Secure Code Review Software products that exemplify Software Composition Analysis (SCA), curated as a starting point for finding similar software.
Selected from G2's verified user reviews and ratings, then matched to this theme for relevance.
How Did G2 Choose These Software Composition Analysis (SCA) Products?
The 9 products shown represent a defining sample for the "Software Composition Analysis (SCA)" theme within Secure Code Review Software on G2 — not an exhaustive list. They are a curated starting point for discovering similar software.
- Sourced from products with verified G2 user reviews and ratings.
- Matched to this theme based on each product's described capabilities and fit, ordered by relevance.
- Rankings and inclusion are unbiased and are not influenced by vendor payment.
Refreshed weekly. Last updated: June 21, 2026.
Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido...
Semgrep is a modern static analysis (SAST), software composition analysis (SCA), and secrets detection platform designed for both developers and security teams. It combines fast, deterministic...
Jit is redefining application security by introducing the first Agentic AppSec Platform, seamlessly blending human expertise with AI-driven automation. Designed for modern development teams, Jit...
Fast, Flexible Code Security! Kiuwan is a robust, end-to-end application security platform that integrates seamlessly into your development process. Our toolset includes Static Application...
Veracode helps companies that innovate through software deliver secure code on time. Unlike on-premise solutions that are hard to scale and focused on finding rather than fixing, Veracode comprises...
GitHub is where the world builds software. Millions of individuals, organizations and businesses around the world use GitHub to discover, share, and contribute software. Developers at startups to...
GitLab is the most comprehensive AI-Powered DevSecOps platform that enables software innovation by empowering development, security, and operations teams to build better software, faster. With...
OX is redefining product security for the AI era. Founded by Neatsun Ziv and Lion Arzi, former Check Point executives, OX is the company behind VibeSec — the first AI-native vibe security...
Microsoft Defender for Cloud is a cloud native application protection platform for multicloud and hybrid environments with comprehensive security across the full lifecycle, from development to...