--- title: Manifest Reviews meta\_title: 'Manifest Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter reviews by the users' company size, role or industry to find out how Manifest works for a business like yours. aggregate\_rating: rating\_value: 5.0 review\_count: 3 scale: '5' date\_modified: '2026-07-17' parent\_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Manifest Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by Manifest but has limited features. Are you part of the Manifest team? [Upgrade your plan](https://my.g2.com/manifest-cyber-manifest/upgrade?utm_campaign=s3&utm_medium=claim-popup&utm_source=g2) to enhance your branding and engage with visitors to your profile! Manifest helps organizations understand and reduce the cybersecurity risk in the technology they produce and procure. The Manifest platform operationalizes software bills of materials (SBOMs), artificial intelligence bills of materials (AIBOMs), and Vulnerability Exploitability eXchange (VEX) documents so organizations can analyze and action the risk in internal or third-party tools. Manifest manages the entire SBOM lifecycle for customers in critical industries like enterprise technology, aerospace, defense contracting, healthcare, manufacturing & logistics, financial services, and the federal government. * * * Seller [Manifest Cyber](https://www.g2.com/sellers/manifest-cyber) Discussions [Manifest Community](https://www.g2.com/products/manifest-cyber-manifest/discuss) Overview by Mike McDonel Show More ## Top-Rated Alternatives [ ![JFrog](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "JFrog") JFrog 4.2/5(161) ](https://www.g2.com/products/jfrog-2024-03-28/reviews) [ ![SonarQube](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SonarQube") SonarQube 4.4/5(155) ](https://www.g2.com/products/sonarqube/reviews) [ ![Snyk](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Snyk") Snyk 4.5/5(135) ](https://www.g2.com/products/snyk/reviews) [ View All Alternatives ](https://www.g2.com/products/manifest-cyber-manifest/competitors/alternatives) ![Shaun M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Shaun M.") SM Shaun M. Director of Platform Engineering Computer Software Mid-Market (51-1000 emp.) 1/23/2024 "Cutting-Edge Tool Enables Complete Lifecycle Management of your Software Bill of Materials" 5/5 What do you like best about Manifest? Manifest makes the generation of our SBOMs easy, secure and efficient. We get immediate and full lifecycle alerts on all of our software supply chain dependencies in real-time. Their customer support is white-glove and they go above and beyond to make sure we are happy with the product. Manifest is so easy to implement that it's been great for us to take our time and integrate where needed. Manifest is a precision-engineered app that we use everyday due to it's significance in securing our software supply chain. They provide a full API to all functionality within their application. Review collected by and hosted on G2.com. What do you dislike about Manifest? The more we use the product the more we want to integrate it into our other tools -- and that takes time. Review collected by and hosted on G2.com. What problems is Manifest solving and how is that benefiting you? Complete lifecycle management of our software bill of materials. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic PZ Peter Z. Mid-Market (51-1000 emp.) 1/19/2024 "Real “Continuous Compliance”" 5/5 What do you like best about Manifest? Straightforward integration of GitHub Action into our CI pipeline allows us to continually monitor the risk we're incurring from third parties. On several occasions during the vendor review process we have prevented the introduction of vulnerabilities into our tech stack by working with third parties to patch their software prior to deployment in our environment. Incredible team and a mutually beneficial partnership. They're punching above their weight and it shows. Review collected by and hosted on G2.com. What do you dislike about Manifest? That more organizations haven't done the same rapid integration with Manifest already, creating an ecosystem of visibility beneficial to everyone producing products. Review collected by and hosted on G2.com. What problems is Manifest solving and how is that benefiting you? Quantifiable reduction of risk within the compliance space. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![Nitish K.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Nitish K.") NK Nitish K. Small-Business (50 or fewer emp.) 1/23/2024 "Manifest saved us hours if not more work" 5/5 What do you like best about Manifest? We work with large enterprises that require SBOMs as a part of compliance and governance reviews. Simply put, we'd have spent prohibitively high amounts of time building SBOMs from scratch instead of using Manifest. The product is easy to use and integrate with. Review collected by and hosted on G2.com. What do you dislike about Manifest? I'd love to be able to share my SBOMs automatically via Manifest (almost like a "website embed") so it just shows up next to my other compliance certifications Review collected by and hosted on G2.com. What problems is Manifest solving and how is that benefiting you? Building SBOMs. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ### There are not enough reviews of Manifest for G2 to provide buying insight. Below are some alternatives with more reviews: [ 1 ![JFrog Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_5cf4ee793f73c672ce8aa94bc061fa90/jfrog-2024-03-28.png "JFrog Logo") JFrog 4.2 (162) The JFrog Platform is an end-to-end, hybrid, and universal binary-centric solution that continuously manages and secures your entire software supply chain from source to edge. We empower developers to be more efficient using JFrog’s services, Artifactory, Xray, Distribution, Pipelines, and Connect on a single unified platform. The JFrog Platform is an enterprise-grade solution that handles the scale of the largest development organizations in the world. The JFrog family of products includes: JFrog Artifactory: -Provides definitive artifact management for flexible development and trusted delivery at any scale. The industry leader. JFrog Xray: -The industry’s only DevOps-Centric Security solution offers protection across your supply chain and is integrated seamlessly with Artifactory and the other JFrog products for a single point of management and security. JFrog Pipelines: -Integrates with the leading CI/CD tools to manage all software pipelines in a single place with additional event triggers and easy-to-use templates. JFrog Distribution and JFrog PDN: -Creates trusted software releases and gets them where they need to be, fast. Handles the highest scale of throughput and consumption. JFrog Connect: -A comprehensive solution for updating, managing and monitoring software applications on Linux-based edge and IoT devices. JFrog Mission Control & Insights: -Enhances control over your JFrog Platform deployment with access to key metrics. ](https://www.g2.com/products/jfrog-2024-03-28/reviews "JFrog")[ 2 ![SonarQube Logo](https://images.g2crowd.com/uploads/product/hd_favicon/2d6b80be24e9f51c144f780f2aa41cb3/sonarqube.svg "SonarQube Logo") SonarQube 4.4 (155) SonarQube is a code quality and vulnerability solution for development teams that integrates with CI/CD pipelines to ensure the software you produce is secure, reliable, and maintainable. ](https://www.g2.com/products/sonarqube/reviews "SonarQube")[ 3 ![Snyk Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_630875599869fc792265ba9508dc29e9/snyk.png "Snyk Logo") Snyk 4.5 (135) Snyk is a security solution designed to find and fix vulnerabilities in Node.js and Ruby apps. ](https://www.g2.com/products/snyk/reviews "Snyk")[ 4 ![Mend.io Logo](https://images.g2crowd.com/uploads/product/hd_favicon/21ab57a73c55fc03865e0381fe1de98a/mend-io.svg "Mend.io Logo") Mend.io 4.3 (124) Mend.io delivers the first AI native application security platform built for software created by both humans and machines. It empowers organizations to secure AI generated code and embedded AI components like models, agents, MCPs, and RAG pipelines. The unified platform brings together comprehensive capabilities including AI security, SAST, SCA, container scanning, and Mend Renovate providing development and security teams complete visibility into risks across their codebase. With AI powered remediation and prioritization workflows, teams are enabled to quickly resolve issues and reduce risk. With a simple, predictable price model, eliminating per-module costs and minimal reliance on expensive professional services Mend.io is a scalable, proactive, developer-friendly platform for modern AppSec—all in a single platform. ](https://www.g2.com/products/mend-io/reviews "Mend.io")[ 5 ![CAST Highlight Logo](https://images.g2crowd.com/uploads/product/hd_favicon/a1226f943d3cabd6a3d359622b6ed8a7/cast-highlight.svg "CAST Highlight Logo") CAST Highlight 4.5 (91) Rapid application portfolio analysis. Automated source code analysis of hundreds of applications in a week for Cloud Readiness, Open Source risks, Resiliency, Agility. Objective software insights combined with qualitative surveys for business context. ](https://www.g2.com/products/cast-highlight/reviews "CAST Highlight")[ 6 ![Aqua Security Logo](https://images.g2crowd.com/uploads/product/hd_favicon/2468cd285055802fb484c7d274dc419a/aqua-security.svg "Aqua Security Logo") Aqua Security 4.2 (57) Aqua Security protects every cloud native application from code to cloud to prompt. As the pioneer in container security and vulnerability management, Aqua delivers full protection across the application lifecycle in real time. Our unified CNAPP combines agentless and agent-based controls with industry-leading runtime security for cloud, on-prem, hybrid, multi-cloud, VM and mainframe environments. The Aqua Platform provides best-in-class security agents and advanced contextual analysis to reduce noise and accelerate remediation. Founded in 2015, Aqua is headquartered in Boston, MA and Ramat Gan, Israel and secures more than 40% of the Fortune 100. Learn more at aquasec.com. ](https://www.g2.com/products/aqua-security/reviews "Aqua Security")[ 7 ![OX Security Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_1c5bd70163bad1cd50fb1358f95bdff0/ox-security.png "OX Security Logo") OX Security 4.8 (51) OX Security helps teams focus on the 5% of issues that really matter, ensuring developers fix the most critical problems first. By consolidating all your security data into one clear view and seamlessly integrating into existing workflows, OX provides actionable insights to improve app security, reduce complexity, and resolve issues faster—all without slowing down development. ](https://www.g2.com/products/ox-security/reviews "OX Security")[ 8 ![SOOS Logo](https://images.g2crowd.com/uploads/product/hd_favicon/085f3188716e60e8e18dc8d1ff5d78df/soos.svg "SOOS Logo") SOOS 4.6 (42) SOOS is the affordable, easy-to-integrate Software Composition Analysis solution for your whole team. Scan your open source software for vulnerabilities, control the introduction of new dependencies, exclude unwanted license-types, generate SBOMs, and fill out your compliance worksheets with confidence–all for one low monthly price. ](https://www.g2.com/products/soos/reviews "SOOS")[ 9 ![Veracode Application Security Platform Logo](https://images.g2crowd.com/uploads/product/hd_favicon/d30c215643c0b745ba4951ab20b60121/veracode-application-security-platform.svg "Veracode Application Security Platform Logo") Veracode Application Security Platform 3.8 (26) Veracode is the world's best automated, on-demand application security testing and code review solution. ](https://www.g2.com/products/veracode-application-security-platform/reviews "Veracode Application Security Platform")[ 10 ![MergeBase Logo](https://images.g2crowd.com/uploads/product/image/thumb_square/thumb_square_1fc65fc837916d87269c040392e791f1/mergebase.png "MergeBase Logo") MergeBase 4.5 (20) rusted by security and development teams at top enterprises, MergeBase provides security and development teams with visibility to the real risk in their applications from vulnerable open source components at every stage of the software development lifecycle with CodeGreen, BuildGreen, and RunGreen. MergeBase accelerates triage by minimizing false positives and deemphasizing vulnerabilities in unused code. It automates remediation during development and can block attacks on vulnerable components in production. ](https://www.g2.com/products/mergebase/reviews "MergeBase") [Show More](#) ##### Pricing Pricing details for this product isn’t currently available. Visit the vendor’s website to learn more. [ View More Pricing Information ](https://www.g2.com/products/manifest-cyber-manifest/pricing) ##### Categories on G2 [Software Bill of Materials (SBOM)](https://www.g2.com/categories/software-bill-of-materials-sbom) ##### Explore More [Which digital signage app works best on tablets](https://www.g2.com/discussions/which-digital-signage-app-works-best-on-tablets)[Which meeting room booking system offers the most intuitive interface?](https://www.g2.com/discussions/which-meeting-room-booking-system-offers-the-most-intuitive-interface)[What are the best AI writing apps for professionals?](https://www.g2.com/discussions/what-are-the-best-ai-writing-apps-for-professionals) [What are the most reliable Acumatica consulting firms based on reviews from CFOs and operations directors?](https://www.g2.com/discussions/what-are-the-most-reliable-acumatica-consulting-firms-based-on-reviews-from-cfos-and-operations-directors)[Best AI coding assistants for in-IDE real-time suggestions and error fixes](https://www.g2.com/discussions/best-ai-coding-assistants-for-in-ide-real-time-suggestions-and-error-fixes)[Pros and Cons Details](https://www.g2.com/products/manifest-cyber-manifest/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)