# Top Free Software Bill of Materials (SBOM) Software ## How Many Software Bill of Materials (SBOM) Software Products Does G2 Track? **Total Products under this Category:** 33 ### Category Stats (Jul 2026) - **Average Rating:** 4.48/5 (↓0.01 vs Jun 2026) The average rating of products in this category, based on all submitted ratings _Last updated: July 19, 2026_ ## How Does G2 Rank Software Bill of Materials (SBOM) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 900+ Authentic Reviews - 33+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. [ OX Security ](https://www.g2.com/products/ox-security/reviews) By [OX Security](https://www.g2.com/sellers/ox-security) [ 4.8/5(51) ](https://www.g2.com/products/ox-security/reviews) What do users say? Users consistently praise the intuitive interface and seamless integration with existing tools, which simplify security management and enhance productivity. The platform's ability to provide comprehen Pros and Cons [ Features (8) ](https://www.g2.com/products/ox-security/reviews?qs=pros-and-cons)[ Complexity (5) ](https://www.g2.com/products/ox-security/reviews?qs=pros-and-cons) [ Cybeats ](https://www.g2.com/products/cybeats/reviews) By [CYBEATS](https://www.g2.com/sellers/cybeats) [ 4.4/5(15) ](https://www.g2.com/products/cybeats/reviews) What do users say? Users consistently praise the product for its great protection against cyber threats and its intuitive interface, which simplifies management and troubleshooting. Many appreciate the real-time alerts [![G2 Advertising](/assets/my-g2-logo-41632af6f81a240a0a9886638f412b2ac9a29f4001534f8c83be89a58ef9d45d.svg "G2 Advertising")](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) Sponsored G2 Advertising Get 2x conversion than Google Ads with G2 Advertising! G2 Advertising places your product in premium positions on high-traffic pages and on targeted competitor pages to reach buyers at key comparison moments. [ Learn More ](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) [ Arnica ](https://www.g2.com/products/arnica/reviews) By [Arnica](https://www.g2.com/sellers/arnica) [ 4.9/5(8) ](https://www.g2.com/products/arnica/reviews) Product Description Arnica is a comprehensive application security posture management (ASPM) platform that protects developers, source code, and products throughout the software development lifecycle. The platform provid Pros and Cons [ Accuracy of Findings (1) ](https://www.g2.com/products/arnica/reviews?qs=pros-and-cons)[ Paid Features (1) ](https://www.g2.com/products/arnica/reviews?qs=pros-and-cons) [ Mend.io ](https://www.g2.com/products/mend-io/reviews) By [Mend](https://www.g2.com/sellers/mend-ab79a83a-6747-4682-8072-a3c176489d0b) [ 4.3/5(115) ](https://www.g2.com/products/mend-io/reviews) What do users say? Users consistently praise the product for its ease of use and effective integration with CI/CD pipelines, which simplifies vulnerability management and dependency tracking. Many appreciate the compreh Pros and Cons [ Scanning Efficiency (8) ](https://www.g2.com/products/mend-io/reviews?qs=pros-and-cons)[ Integration Issues (6) ](https://www.g2.com/products/mend-io/reviews?qs=pros-and-cons) [ Socket ](https://www.g2.com/products/socket-socket/reviews) By [Socket](https://www.g2.com/sellers/socket) [ 4.7/5(10) ](https://www.g2.com/products/socket-socket/reviews) What do users say? Users consistently praise Socket for its strong supply chain monitoring and developer-friendly design, which seamlessly integrates into existing workflows. The product is noted for providing reliable Pros and Cons [ Security (3) ](https://www.g2.com/products/socket-socket/reviews?qs=pros-and-cons)[ Missing Features (1) ](https://www.g2.com/products/socket-socket/reviews?qs=pros-and-cons) [ SOOS ](https://www.g2.com/products/soos/reviews) By [SOOS](https://www.g2.com/sellers/soos) [ 4.6/5(42) ](https://www.g2.com/products/soos/reviews) What do users say? Users consistently praise the product for its ease of use and reliable integration with development workflows, making vulnerability management straightforward. The intuitive dashboard and responsive s Pros and Cons [ Ease of Use (9) ](https://www.g2.com/products/soos/reviews?qs=pros-and-cons)[ Lack of Guidance (3) ](https://www.g2.com/products/soos/reviews?qs=pros-and-cons) [ CAST Highlight ](https://www.g2.com/products/cast-highlight/reviews) By [CAST](https://www.g2.com/sellers/cast) [ 4.5/5(91) ](https://www.g2.com/products/cast-highlight/reviews) What do users say? Users consistently praise the ease of use and speed of analysis provided by CAST Highlight, which allows for quick assessments of application portfolios regarding cloud readiness and software health. Pros and Cons [ Ease of Use (8) ](https://www.g2.com/products/cast-highlight/reviews?qs=pros-and-cons)[ Complex Navigation (1) ](https://www.g2.com/products/cast-highlight/reviews?qs=pros-and-cons) [ JFrog ](https://www.g2.com/products/jfrog-2024-03-28/reviews) By [JFrog Ltd](https://www.g2.com/sellers/jfrog-ltd) [ 4.2/5(153) ](https://www.g2.com/products/jfrog-2024-03-28/reviews) What do users say? Users consistently praise JFrog for its centralized artifact management and seamless integration with CI/CD tools, which significantly enhances deployment efficiency and reliability. The platform's ab Pros and Cons [ Features (18) ](https://www.g2.com/products/jfrog-2024-03-28/reviews?qs=pros-and-cons)[ Complexity (9) ](https://www.g2.com/products/jfrog-2024-03-28/reviews?qs=pros-and-cons) [ SonarQube ](https://www.g2.com/products/sonarqube/reviews) By [SonarSource Sàrl](https://www.g2.com/sellers/sonarsource-sarl) [ 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) What do users say? Users consistently praise SonarQube for its automated code quality checks and seamless CI/CD integration, which significantly enhance development workflows and reduce reliance on manual reviews. The t Pros and Cons [ Code Quality (24) ](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons)[ Software Bugs (12) ](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons) [ Xygeni ](https://www.g2.com/products/xygeni/reviews) By [Xygeni Security](https://www.g2.com/sellers/xygeni-security) [ 4.6/5(5) ](https://www.g2.com/products/xygeni/reviews) Product Description Secure your Software Development and Delivery! Xygeni Security specializes in Application Security Posture Management (ASPM), using deep contextual insights to effectively prioritize and manage secur Pros and Cons [ Comprehensive Security (2) ](https://www.g2.com/products/xygeni/reviews?qs=pros-and-cons)[ Difficult Setup (1) ](https://www.g2.com/products/xygeni/reviews?qs=pros-and-cons) [ CAST SBOM Manager ](https://www.g2.com/products/cast-sbom-manager/reviews) By [CAST](https://www.g2.com/sellers/cast) [ 0/5(0) ](https://www.g2.com/products/cast-sbom-manager/reviews) Product Description CAST SBOM Manager enables users to automatically create, customize, and maintain Software Bill of Materials (SBOMs) with the ultimate level of control and flexibility. It detects open source dependenc [ Eracent SBOM-HQ ](https://www.g2.com/products/eracent-sbom-hq/reviews) By [Eracent](https://www.g2.com/sellers/eracent) [ 0/5(0) ](https://www.g2.com/products/eracent-sbom-hq/reviews) Product Description SBOM-HQ™ - from Eracent SBOM-HQ™ provides a well-rounded set of data, reporting and analysis features that help organizations minimize risks and comply with cyber mandates and directives. While [ FOSSA ](https://www.g2.com/products/fossa/reviews) By [FOSSA](https://www.g2.com/sellers/fossa) [ 4.2/5(15) ](https://www.g2.com/products/fossa/reviews) What do users say? Users consistently praise FOSSA for its ease of use and comprehensive evaluations of open-source licensing and security issues. The product effectively integrates with various CI/CD platforms, allowin Pros and Cons [ Easy Integrations (1) ](https://www.g2.com/products/fossa/reviews?qs=pros-and-cons) [ Heeler ](https://www.g2.com/products/heeler/reviews) By [Heeler Security](https://www.g2.com/sellers/heeler-security) [ 0/5(0) ](https://www.g2.com/products/heeler/reviews) Product Description Heeler empowers application security teams to shift left with the context they need to reduce noise, accelerate remediation, and move beyond traditional vulnerability management. By combining ASPM, SC [ MergeBase ](https://www.g2.com/products/mergebase/reviews) By [MergeBase Software](https://www.g2.com/sellers/mergebase-software) [ 4.5/5(20) ](https://www.g2.com/products/mergebase/reviews) What do users say? Users consistently praise MergeBase for its ease of use and ability to provide real-time warnings about vulnerabilities, which enhances security during the development process. The platform is valued [![G2 Advertising](/assets/my-g2-logo-41632af6f81a240a0a9886638f412b2ac9a29f4001534f8c83be89a58ef9d45d.svg "G2 Advertising")](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) Sponsored G2 Advertising Get 2x conversion than Google Ads with G2 Advertising! G2 Advertising places your product in premium positions on high-traffic pages and on targeted competitor pages to reach buyers at key comparison moments. [ Learn More ](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) - ‹ Prev‹ Prev - 1 - [2](/categories/software-bill-of-materials-sbom/free?order=popular&page=2#product-list) - [Next ›Next ›](/categories/software-bill-of-materials-sbom/free?order=popular&page=2#product-list) Spotlight Categories [Core HR Software](https://www.g2.com/categories/core-hr) [SEO Tools](https://www.g2.com/categories/seo-tools) [Contact Center Quality Assurance Software](https://www.g2.com/categories/contact-center-quality-assurance) [Pricing Software](https://www.g2.com/categories/pricing) [SMS Marketing Software](https://www.g2.com/categories/sms-marketing) Similar Categories - [Static Code Analysis](/categories/static-code-analysis) - [Container Security](/categories/container-security-tools) - [Dynamic Application Security Testing (DAST)](/categories/dynamic-application-security-testing-dast) - [Interactive Application Security Testing (IAST)](/categories/interactive-application-security-testing-iast) - [Log Analysis](/categories/log-analysis) - [Penetration Testing](/categories/penetration-testing-tools) - [Secure Code Review](/categories/secure-code-review) - [Software Composition Analysis](/categories/software-composition-analysis) - [Static Application Security Testing (SAST)](/categories/static-application-security-testing-sast) - [Vulnerability Scanner](/categories/vulnerability-scanner) - [Web Application Firewall (WAF)](/categories/web-application-firewall-waf) [Browse Software Bill of Materials (SBOM) Themes](/categories/software-bill-of-materials-sbom/themes)