Debricked Reviews & Product Details

1. Developer-first design: Debricked integrates directly into CI/CD pipelines (GitHub, GitLab, Azure DevOps, Bitbucket). Developers get immediate feedback on vulnerable dependencies during development, rather than only after release. This helps shift security left in the SDLC.

2. Strong Software Composition Analysis (SCA): It automatically scans open-source dependencies across the codebase and identifies vulnerabilities (CVEs), outdated libraries, and security risks in transitive dependencies. It also provides clear remediation suggestions.

3. Automated fix pull requests: One of Debricked’s best features is that it can automatically generate pull requests to update vulnerable libraries, which saves developers a lot of manual effort.

4. SBOM and dependency visibility: It generates a Software Bill of Materials (SBOM), and the visual dependency tree makes it easier for teams to understand which libraries depend on what.

5. Lightweight and fast: Compared to some traditional security tools, Debricked scans are fast and easy to integrate, which developers tend to appreciate.

6. Open-source license compliance: It detects license issues (GPL, Apache, MIT, etc.) and helps organizations avoid legal or compliance risks. Review collected by and hosted on G2.com.

One thing I dislike about Debricked is that, although it’s very strong at identifying vulnerable open-source dependencies, it can sometimes fall short on the deeper analysis capabilities that some more mature SCA tools offer. For instance, it may flag vulnerabilities that are technically present in a dependency but not actually reachable within the application, which then requires developers to do additional manual verification. Also, while Debricked integrates well with common CI/CD platforms, I think the overall ecosystem of integrations and the reporting customization options could be broader, especially for large enterprise environments. Overall, it’s a powerful, developer-friendly tool, but there’s still room to improve advanced analysis and enterprise-level reporting features. Review collected by and hosted on G2.com.

First of all, I was impressed with the seamless integration, I've used Debricked for both Gitlab and Github CI/CDs and it hazzlefree to get started and setting it up. Moving deeper into actual value, I find it easy to use and with highly accurate data; meaning I spend less time investigating "false" vulnerabilities. Furthermore, the ability to codify policies and SLA's on security and compliance have helped me build great behaviours around the risks of using open-source dependencies. Review collected by and hosted on G2.com.

Previously, there has been some performance issues, with a few scans here and there taking longer to complete. It is obvious that this has been a priority for them to solve and since about a year ago the performance has been steady and scans are now really quick. Review collected by and hosted on G2.com.

The ease of setting things up and getting your first result. Debricked integrates very well with most popular development environments. The documentation is also very helpful when needed. Review collected by and hosted on G2.com.

There was a re-design some time back and there are still small mismatches between the actual GUI and the documentation. There is also some peculiar GUI behavior on some pages, but all in all very minor things to note. Review collected by and hosted on G2.com.

Full control of security, compliance, and health with a toolkit that will revolutionize the way you use open source Review collected by and hosted on G2.com.

Full control of security, compliance, and health with a toolkit that will revolutionize the way you use open source Review collected by and hosted on G2.com.

The Debricked tool is powerful yet simple. I put it in the hands of junior developers and have them get value from it immediately, and it makes the lead programmers pay attention to their results. Their latest addition - the open source search tool displaying project health - is great. Review collected by and hosted on G2.com.

At times the performance is low, but this has improved. Review collected by and hosted on G2.com.