Static Application Security Testing (SAST) Software in Software Composition Analysis (SCA) theme
This theme focuses on tools that help identify open source components, assess their vulnerabilities, and manage risks within a software supply chain.
Updated July 05, 2026
Products that define this theme
A representative set of Static Application Security Testing (SAST) Software products that exemplify Software Composition Analysis (SCA), curated as a starting point for finding similar software.
Selected from G2's verified user reviews and ratings, then matched to this theme for relevance.
How Did G2 Choose These Software Composition Analysis (SCA) Products?
The 4 products shown represent a defining sample for the "Software Composition Analysis (SCA)" theme within Static Application Security Testing (SAST) Software on G2 — not an exhaustive list. They are a curated starting point for discovering similar software.
- Sourced from products with verified G2 user reviews and ratings.
- Matched to this theme based on each product's described capabilities and fit, ordered by relevance.
- Rankings and inclusion are unbiased and are not influenced by vendor payment.
Refreshed weekly. Last updated: July 05, 2026.
Semgrep is a modern static analysis (SAST), software composition analysis (SCA), and secrets detection platform designed for both developers and security teams. It combines fast, deterministic...
JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to...
Contrast Security is the global leader in Application Detection and Response (ADR), empowering organizations to see and stop attacks on applications and APIs in real time. Contrast embeds patented...
ZeroPath (YC S24) is the first AI-native application security platform that fundamentally reimagines how organizations find and fix vulnerabilities. Unlike deterministic SAST tools that bolt AI...
G2 Grid® for this theme
