---
title: Dependency-Track Reviews
meta_title: 'Dependency-Track Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter reviews by the users' company size, role or industry to find
  out how Dependency-Track works for a business like yours.
aggregate_rating:
  rating_value: 4.3
  review_count: 4
  scale: '5'
date_modified: '2026-07-17'
parent_category:
  name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t"
  url: https://www.g2.com/categories/devsecops
---


# Dependency-Track Reviews
**Vendor:** OWASP  
**Category:** [Software Composition Analysis Tools](https://www.g2.com/categories/software-composition-analysis)  
**Average Rating:** 4.3/5.0  
**Total Reviews:** 4
## About Dependency-Track
Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM). This approach provides capabilities that traditional Software Composition Analysis (SCA) solutions cannot achieve. Dependency-Track monitors component usage across all versions of every application in its portfolio in order to proactively identify risk across an organization. The platform has an API-first design and is ideal for use in Continuous Integration (CI) and Continuous Delivery (CD) environments.



## Dependency-Track Pros & Cons
**What users like:**

- Users praise the **neat UI and intuitive design** of Dependency-Track, enhancing their overall user experience. (1 reviews)
- Users appreciate the **neat UI and ease of integration** in Dependency-Track, enhancing usability through illustrative dashboards. (1 reviews)
- Users value the **neat UI** and illustrative design of Dependency-Track, enhancing overall risk management efficiency. (1 reviews)
- Users appreciate the **neat UI with side nav bars and illustrative dashboards** for enhanced usability and integration. (1 reviews)

**What users dislike:**

- Users find the **limited cloud integration** frustrating, resorting to manual data export methods for collaboration. (1 reviews)

## Dependency-Track Reviews
  ### 1. Full focus on vulnerabilities

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Medical Devices | Enterprise (> 1000 emp.)

**Reviewed Date:** January 21, 2025

**What do you like best about Dependency-Track?**

API-first design
Assessment database as part of data structure and process

**What do you dislike about Dependency-Track?**

Project views are limited 
No built-in export

**What problems is Dependency-Track solving and how is that benefiting you?**

SCA and scan against NVD

  ### 2. Best open-source SCA tool in the market

**Rating:** 5.0/5.0 stars

**Reviewed by:** Vis C. | Software Security Technical Director, Enterprise (> 1000 emp.)

**Reviewed Date:** June 24, 2022

**What do you like best about Dependency-Track?**

Has multiple vulnerability sources (NVD, OSS Index, etc.) and thus higher positive percentage.

**What do you dislike about Dependency-Track?**

Slow in performance, especially the GUI operations

**What problems is Dependency-Track solving and how is that benefiting you?**

Software composition analysis on software. This essentially means identifying 3rd party libraries (SBOM) and reporting vulnerabilities on them.


## Dependency-Track Discussions
  - [What is Dependency-Track used for?](https://www.g2.com/discussions/what-is-dependency-track-used-for) - 1 comment

- [View Dependency-Track pricing details and edition comparison](https://www.g2.com/products/dependency-track/reviews?filters%5Bnps_score%5D%5B%5D=5&section=pricing&secure%5Bexpires_at%5D=2026-08-13+01%3A34%3A27+-0500&secure%5Bsession_id%5D=d64fa811-ed40-4ec6-8f66-987d3a175079&secure%5Btoken%5D=3b06e2095a9013056a2491250ae7c1542428322d5ecad139a3d26fdfbd1be7a2&format=llm_user)

## Dependency-Track Features
**Functionality - Software Composition Analysis **
- Language Support
- Integration
- Transparency

**Effectiveness - Software Composition Analysis**
- Remediation Suggestions
- Continuous Monitoring
- Thorough Detection

## Top Dependency-Track Alternatives
  - [GitLab](https://www.g2.com/products/gitlab/reviews) - 4.5/5.0 (885 reviews)
  - [GitHub](https://www.g2.com/products/github/reviews) - 4.7/5.0 (2,334 reviews)
  - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (838 reviews)