# Top Free Software Bill of Materials (SBOM) Software ## How Many Software Bill of Materials (SBOM) Software Products Does G2 Track? **Total Products under this Category:** 33 ### Category Stats (Jul 2026) - **Average Rating:** 4.49/5 (↑0.01 vs Jun 2026) The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** Finite State (+1.29%) - Among all products in this category, Finite State recorded the largest rating increase compared to last month _Last updated: July 28, 2026_ ## How Does G2 Rank Software Bill of Materials (SBOM) Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 900+ Authentic Reviews - 33+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. **Sponsored** ### JFrog JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to production. Driven by a “Liquid Software” vision to keep software continuously flowing, secure, and always up to date, the JFrog Platform serves as the definitive software supply chain system of record. It is uniquely engineered to power organizations as they build, manage, and distribute trusted software with unprecedented speed, security, and scale across hybrid and multi-cloud environments. As software engineering evolves in the AI era, JFrog’s newest offerings address the industry's most pressing trend: the rise of agentic software development and the hidden security risks of "Shadow AI." In response to threat actors increasingly targeting developer workflows including a massive surge in malicious open-source AI models and infected packages; JFrog has expanded its platform capabilities to deliver absolute end-to-end visibility and automated compliance. Key new innovations include the JFrog AI Catalog, which enables organizations to centralize, govern, and control the lifecycle of AI models approved for enterprise use. To secure autonomous coding environments, JFrog introduced the Universal MCP Registry and the Agent Skills Registry (developed alongside NVIDIA). These new solutions establish the industry’s first enterprise-grade trust layer to safely manage and store AI agent skills, monitor connections, and instantly block unsafe developer tools or malicious coding extensions right where developers work. Furthermore, the integration of advanced DevGovOps and Runtime Security tools allows teams to replace slow, manual compliance audits with continuous, background policy enforcement. By shifting security left directly into the binary pipeline, JFrog ensures that the volume of AI-assisted code does not outpace an organization's ability to verify its safety. Today, millions of users and approximately 6,600 organizations worldwide, including a majority of the Fortune 100, depend on the universal JFrog Platform to eliminate point-solution fatigue, bridge the governance gap, and securely embrace digital transformation. Learn more at www.jfrog.com or follow us on X @JFrog. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1008169&secure%5Bchosen_at%5D=2026-07-28T20%3A51%3A15Z&secure%5Bdisplayable_resource_id%5D=1008169&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1008169&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=143017&secure%5Bresource_id%5D=1008169&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fsoftware-bill-of-materials-sbom%2Ffree&secure%5Btoken%5D=3b91d30ecde803edfaebd7d8db86e13f3ef2524b894410352890089e20c9b6ea&secure%5Burl%5D=https%3A%2F%2Fjfrog.com%2Fartifactory%2F%3Futm_source%3Dg2%26utm_medium%3Dcpc_social%26utm_campaign%3Dbrand_awareness_banner_ad%26utm_content%3Du-bin&secure%5Burl_type%5D=custom_url) [ OX Security ](https://www.g2.com/products/ox-security/reviews) By [OX Security](https://www.g2.com/sellers/ox-security) [ 4.8/5(51) ](https://www.g2.com/products/ox-security/reviews) What do users say? Users consistently praise the intuitive interface and seamless integration with existing tools, which simplify security management and enhance productivity. The platform's ability to provide comprehen Pros and Cons [ Features (8) ](https://www.g2.com/products/ox-security/reviews?qs=pros-and-cons)[ Complexity (5) ](https://www.g2.com/products/ox-security/reviews?qs=pros-and-cons) [ Cybeats ](https://www.g2.com/products/cybeats/reviews) By [CYBEATS](https://www.g2.com/sellers/cybeats) [ 4.4/5(15) ](https://www.g2.com/products/cybeats/reviews) What do users say? Users consistently praise the product for its great protection against cyber threats and its intuitive interface, which simplifies management and troubleshooting. Many appreciate the real-time alerts [ Mend.io ](https://www.g2.com/products/mend-io/reviews) By [Mend](https://www.g2.com/sellers/mend-ab79a83a-6747-4682-8072-a3c176489d0b) [ 4.3/5(116) ](https://www.g2.com/products/mend-io/reviews) What do users say? Users consistently praise the product for its ease of use and effective integration with CI/CD pipelines, which simplifies vulnerability management and dependency tracking. Many appreciate the compreh Pros and Cons [ Scanning Efficiency (8) ](https://www.g2.com/products/mend-io/reviews?qs=pros-and-cons)[ Integration Issues (6) ](https://www.g2.com/products/mend-io/reviews?qs=pros-and-cons) [ Arnica ](https://www.g2.com/products/arnica/reviews) By [Arnica](https://www.g2.com/sellers/arnica) [ 4.9/5(8) ](https://www.g2.com/products/arnica/reviews) Product Description Arnica is a comprehensive application security posture management (ASPM) platform that protects developers, source code, and products throughout the software development lifecycle. The platform provid Pros and Cons [ Accuracy of Findings (1) ](https://www.g2.com/products/arnica/reviews?qs=pros-and-cons)[ Paid Features (1) ](https://www.g2.com/products/arnica/reviews?qs=pros-and-cons) [ Socket ](https://www.g2.com/products/socket-socket/reviews) By [Socket](https://www.g2.com/sellers/socket) [ 4.7/5(10) ](https://www.g2.com/products/socket-socket/reviews) What do users say? Users consistently praise Socket for its strong supply chain monitoring and developer-friendly design, which seamlessly integrates into existing workflows. The product is noted for providing reliable Pros and Cons [ Security (3) ](https://www.g2.com/products/socket-socket/reviews?qs=pros-and-cons)[ Missing Features (1) ](https://www.g2.com/products/socket-socket/reviews?qs=pros-and-cons) [ SOOS ](https://www.g2.com/products/soos/reviews) By [SOOS](https://www.g2.com/sellers/soos) [ 4.6/5(42) ](https://www.g2.com/products/soos/reviews) What do users say? Users consistently praise the product for its ease of use and reliable integration with development workflows, making vulnerability management straightforward. The intuitive dashboard and responsive s Pros and Cons [ Ease of Use (9) ](https://www.g2.com/products/soos/reviews?qs=pros-and-cons)[ Lack of Guidance (3) ](https://www.g2.com/products/soos/reviews?qs=pros-and-cons) [ CAST Highlight ](https://www.g2.com/products/cast-highlight/reviews) By [CAST](https://www.g2.com/sellers/cast) [ 4.5/5(91) ](https://www.g2.com/products/cast-highlight/reviews) What do users say? Users consistently praise the ease of use and speed of analysis provided by CAST Highlight, which allows for quick assessments of application portfolios regarding cloud readiness and software health. Pros and Cons [ Ease of Use (8) ](https://www.g2.com/products/cast-highlight/reviews?qs=pros-and-cons)[ Complex Navigation (1) ](https://www.g2.com/products/cast-highlight/reviews?qs=pros-and-cons) [ JFrog ](https://www.g2.com/products/jfrog-2024-03-28/reviews) By [JFrog Ltd](https://www.g2.com/sellers/jfrog-ltd) [ 4.2/5(155) ](https://www.g2.com/products/jfrog-2024-03-28/reviews) What do users say? Users consistently praise JFrog for its centralized artifact management and seamless integration with CI/CD tools, which significantly enhances deployment efficiency and reliability. The platform's ab Pros and Cons [ Features (18) ](https://www.g2.com/products/jfrog-2024-03-28/reviews?qs=pros-and-cons)[ Complexity (9) ](https://www.g2.com/products/jfrog-2024-03-28/reviews?qs=pros-and-cons) [ SonarQube ](https://www.g2.com/products/sonarqube/reviews) By [SonarSource Sàrl](https://www.g2.com/sellers/sonarsource-sarl) [ 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) What do users say? Users consistently praise SonarQube for its automated code quality checks and seamless CI/CD integration, which significantly enhance development workflows and reduce reliance on manual reviews. The t Pros and Cons [ Code Quality (24) ](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons)[ Software Bugs (12) ](https://www.g2.com/products/sonarqube/reviews?qs=pros-and-cons) [ Xygeni ](https://www.g2.com/products/xygeni/reviews) By [Xygeni Security](https://www.g2.com/sellers/xygeni-security) [ 4.6/5(5) ](https://www.g2.com/products/xygeni/reviews) Product Description Secure your Software Development and Delivery! Xygeni Security specializes in Application Security Posture Management (ASPM), using deep contextual insights to effectively prioritize and manage secur Pros and Cons [ Comprehensive Security (2) ](https://www.g2.com/products/xygeni/reviews?qs=pros-and-cons)[ Difficult Setup (1) ](https://www.g2.com/products/xygeni/reviews?qs=pros-and-cons) [ CAST SBOM Manager ](https://www.g2.com/products/cast-sbom-manager/reviews) By [CAST](https://www.g2.com/sellers/cast) [ 0/5(0) ](https://www.g2.com/products/cast-sbom-manager/reviews) Product Description CAST SBOM Manager enables users to automatically create, customize, and maintain Software Bill of Materials (SBOMs) with the ultimate level of control and flexibility. It detects open source dependenc [ Eracent SBOM-HQ ](https://www.g2.com/products/eracent-sbom-hq/reviews) By [Eracent](https://www.g2.com/sellers/eracent) [ 0/5(0) ](https://www.g2.com/products/eracent-sbom-hq/reviews) Product Description SBOM-HQ™ - from Eracent SBOM-HQ™ provides a well-rounded set of data, reporting and analysis features that help organizations minimize risks and comply with cyber mandates and directives. While [ FOSSA ](https://www.g2.com/products/fossa/reviews) By [FOSSA](https://www.g2.com/sellers/fossa) [ 4.2/5(15) ](https://www.g2.com/products/fossa/reviews) What do users say? Users consistently praise FOSSA for its ease of use and comprehensive evaluations of open-source licensing and security issues. The product effectively integrates with various CI/CD platforms, allowin Pros and Cons [ Easy Integrations (1) ](https://www.g2.com/products/fossa/reviews?qs=pros-and-cons) [ Heeler ](https://www.g2.com/products/heeler/reviews) By [Heeler Security](https://www.g2.com/sellers/heeler-security) [ 0/5(0) ](https://www.g2.com/products/heeler/reviews) Product Description Heeler empowers application security teams to shift left with the context they need to reduce noise, accelerate remediation, and move beyond traditional vulnerability management. By combining ASPM, SC [ MergeBase ](https://www.g2.com/products/mergebase/reviews) By [MergeBase Software](https://www.g2.com/sellers/mergebase-software) [ 4.5/5(20) ](https://www.g2.com/products/mergebase/reviews) What do users say? Users consistently praise MergeBase for its ease of use and ability to provide real-time warnings about vulnerabilities, which enhances security during the development process. The platform is valued - ‹ Prev‹ Prev - 1 - [2](/categories/software-bill-of-materials-sbom/free?order=popular&page=2#product-list) - [Next ›Next ›](/categories/software-bill-of-materials-sbom/free?order=popular&page=2#product-list) Spotlight Categories [Customer Success Software](https://www.g2.com/categories/customer-success) [Remote Monitoring & Management (RMM) Software](https://www.g2.com/categories/remote-monitoring-management-rmm) [Lead Intelligence Software](https://www.g2.com/categories/lead-intelligence) [Event Management Platforms](https://www.g2.com/categories/event-management-platforms) [Robotic Process Automation (RPA) Software](https://www.g2.com/categories/robotic-process-automation-rpa) Similar Categories - [Static Code Analysis](/categories/static-code-analysis) - [Container Security](/categories/container-security-tools) - [Dynamic Application Security Testing (DAST)](/categories/dynamic-application-security-testing-dast) - [Interactive Application Security Testing (IAST)](/categories/interactive-application-security-testing-iast) - [Log Analysis](/categories/log-analysis) - [Penetration Testing](/categories/penetration-testing-tools) - [Secure Code Review](/categories/secure-code-review) - [Software Composition Analysis](/categories/software-composition-analysis) - [Static Application Security Testing (SAST)](/categories/static-application-security-testing-sast) - [Vulnerability Scanner](/categories/vulnerability-scanner) - [Web Application Firewall (WAF)](/categories/web-application-firewall-waf) [Browse Software Bill of Materials (SBOM) Themes](/categories/software-bill-of-materials-sbom/themes)