# Top Free Software Supply Chain Security Solutions Check out our list of free Software Supply Chain Security Solutions. Products featured on this list are the ones that offer a free trial version. As with most free versions, there are limitations, typically time or features. If you'd like to see more products and to evaluate additional feature options, compare all [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools) to ensure you get the right product. ## View Free Software Supply Chain Security Solutions G2 takes pride in showing unbiased reviews on user satisfaction in our ratings and reports. We do not allow paid placements in any of our ratings, rankings, or reports. Learn about our [scoring methodologies](https://research.g2.com/g2-scoring-methodologies). **17** Software Supply Chain Security Tools Products Available View all [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools) View all [Software Supply Chain Security Solutions](https://www.g2.com/categories/software-supply-chain-security-tools) ### [Harness Platform](https://www.g2.com/products/harness-platform/reviews) [By Harness](https://www.g2.com/sellers/harness-25016f40-e80f-4417-bea8-39412055d17a) [ (304)4.6 out of 5 ](https://www.g2.com/products/harness-platform/reviews#reviews "Read Harness Platform Reviews") Product Description Simplify your developer experience with the world's first AI-augmented software delivery platform. Upgrade your software delivery with Harness' innovative CI/CD, Feature Flags, Infrastructure as Co **Users:** Software Engineer, DevOps Engineer · **Industries:** Computer Software, Financial Services · **Market Segment:** 43% Enterprise, 38% Mid-Market ![Verified User in Airlines/Aviation](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Airlines/Aviation") UA Cicd ccm platforms are the most I am familiar with and working towards optimizing more.[Read review](https://www.g2.com/products/harness-platform/reviews/harness-platform-review-10231283) ![Verified User in Airlines/Aviation](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Airlines/Aviation") UA A lot of helpful features, thoughtful deploying process[Read review](https://www.g2.com/products/harness-platform/reviews/harness-platform-review-10232625) Year Founded 2018 HQ Location San Francisco Company Website https://harness.io/ Twitter @HarnessWealth LinkedIn® Page https://www.linkedin.com/company/harnessinc/ ### [Aikido Security](https://www.g2.com/products/aikido-security/reviews) [By Aikido Security](https://www.g2.com/sellers/aikido-security) [ (145)4.6 out of 5 ](https://www.g2.com/products/aikido-security/reviews#reviews "Read Aikido Security Reviews") Product Description Aikido Security is the developer-first security platform that unifies code, cloud, protection, and attack testing in one suite of best-in-class products. Built by developers for developers, Aikido hel **Users:** CTO, Founder · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 70% Small-Business, 18% Mid-Market ![Richard P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Richard P.") RP It gives a lot of insights into issues and the AI takes care of an initial review saving a lot of time while providing evidence and in a lot of...[Read review](https://www.g2.com/products/aikido-security/reviews/aikido-security-review-12336031) ![Benjamin d.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Benjamin d.") BD I like that Aikido Security gives a nice overview and quick fixes through automated reviews. It runs weekly scans that highlight what we need to...[Read review](https://www.g2.com/products/aikido-security/reviews/aikido-security-review-12342163) Year Founded 2022 HQ Location Ghent, Belgium Company Website https://aikido.dev Twitter @AikidoSecurity LinkedIn® Page https://www.linkedin.com/company/aikido-security/ [![G2 Advertising](/assets/my-g2-logo-41632af6f81a240a0a9886638f412b2ac9a29f4001534f8c83be89a58ef9d45d.svg "G2 Advertising")](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) Sponsored G2 Advertising Get 2x conversion than Google Ads with G2 Advertising! G2 Advertising places your product in premium positions on high-traffic pages and on targeted competitor pages to reach buyers at key comparison moments. [ Learn More ](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) ### [JFrog](https://www.g2.com/products/jfrog-2024-03-28/reviews) [By JFrog Ltd](https://www.g2.com/sellers/jfrog-ltd) [ (143)4.2 out of 5 ](https://www.g2.com/products/jfrog-2024-03-28/reviews#reviews "Read JFrog Reviews") Product Description JFrog Ltd. (Nasdaq: FROG), the creators of the unified DevOps, DevSecOps, DevGovOps and MLOps platform, is on a mission to create a world of software delivered without friction from development to pro **Users:** Software Engineer, DevOps Engineer · **Industries:** Information Technology and Services, Computer Software · **Market Segment:** 50% Enterprise, 31% Mid-Market ![Sifiso M.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Sifiso M.") SM I love how JFrog keeps software versions consistent across multiple machines, which is crucial for my work. It helps reduce errors during installs...[Read review](https://www.g2.com/products/jfrog-2024-03-28/reviews/jfrog-review-12528942) ![Verified User in Consulting](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Consulting") AC The main advantage is its universal repository support, which allows you to connect different artifact types such as Docker, Apache Airflow,...[Read review](https://www.g2.com/products/jfrog-2024-03-28/reviews/jfrog-review-12902716) Year Founded 2008 HQ Location Sunnyvale, CA Company Website https://jfrog.com Twitter @jfrog LinkedIn® Page https://www.linkedin.com/company/jfrog-ltd/ Ownership NASDAQ: FROG ### [SOOS](https://www.g2.com/products/soos/reviews) [By SOOS](https://www.g2.com/sellers/soos) [ (42)4.6 out of 5 ](https://www.g2.com/products/soos/reviews#reviews "Read SOOS Reviews") Product Description SOOS is the complete application security posture management platform. Scan your software for vulnerabilities, control the introduction of new dependencies, exclude unwanted license types, generate an **Industries:** Information Technology and Services, Computer Software · **Market Segment:** 50% Mid-Market, 43% Small-Business ![Jim B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jim B.") JB Cost-effective for startups. I always put off scanning my open-source libraries because the cost was too high to bear. SOOS takes that off the table.[Read review](https://www.g2.com/products/soos/reviews/soos-review-5200061) ![Jeff G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Jeff G.") JG SOOS works about as well as Snyk or Sonatype for SCA, and at about 0.1% of the price. Their support has been super responsive and helpful when...[Read review](https://www.g2.com/products/soos/reviews/soos-review-7152570) Year Founded 2019 HQ Location Winooski, US Company Website https://soos.io Twitter @soostech LinkedIn® Page https://www.linkedin.com/company/53122310 ### [Mend.io](https://www.g2.com/products/mend-io/reviews) [By Mend](https://www.g2.com/sellers/mend-ab79a83a-6747-4682-8072-a3c176489d0b) [ (114)4.3 out of 5 ](https://www.g2.com/products/mend-io/reviews#reviews "Read Mend.io Reviews") Product Description Modern risk doesn't live in one layer, it lives between them. Mend.io is built for every risk, across AI and AppSec, securing the code layer, the AI layer, and the interactions between them. From disc **Users:** Software Engineer · **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 37% Small-Business, 34% Mid-Market ![Marek N.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Marek N.") MN I like Renovate works with GitHub and is free[Read review](https://www.g2.com/products/mend-io/reviews/mend-io-review-4570201) ![Bervianto Leo P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Bervianto Leo P.") BP Security scanning features that allow me to detect the dependencies vulnerabilities. Github integration to detect the dependencies vulnerabilities....[Read review](https://www.g2.com/products/mend-io/reviews/mend-io-review-4687482) Year Founded 2011 HQ Location Boston, Massachusetts Company Website https://mend.io Twitter @Mend\_io LinkedIn® Page https://www.linkedin.com/company/2440656/ ### [OX Security](https://www.g2.com/products/ox-security/reviews) [By OX Security](https://www.g2.com/sellers/ox-security) [ (51)4.8 out of 5 ](https://www.g2.com/products/ox-security/reviews#reviews "Read OX Security Reviews") Product Description OX is redefining product security for the AI era. Founded by Neatsun Ziv and Lion Arzi, former Check Point executives, OX is the company behind VibeSec — the first AI-native vibe security platform. **Users:** Security Engineer · **Industries:** Financial Services, Information Technology and Services · **Market Segment:** 63% Mid-Market, 25% Enterprise ![Verified User in Automotive](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Automotive") EA As one of OX Security's first customers, I was searching for an effective solution to upscale Upstream Security's application security stack. I...[Read review](https://www.g2.com/products/ox-security/reviews/ox-security-review-10487561) ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Best Free Solution for private users who want to check their repos.[Read review](https://www.g2.com/products/ox-security/reviews/ox-security-review-10491157) Year Founded 2021 HQ Location New York, USA Company Website https://www.ox.security/ LinkedIn® Page https://www.linkedin.com/company/ox-security/ ### [Cybeats](https://www.g2.com/products/cybeats/reviews) [By CYBEATS](https://www.g2.com/sellers/cybeats) [ (15)4.4 out of 5 ](https://www.g2.com/products/cybeats/reviews#reviews "Read Cybeats Reviews") Product Description Cybeats is at the forefront of cybersecurity innovation and is focused explicitly on automating Software Bill of Materials (SBOM) and Vulnerability Exploitability eXchange (VEX) management. Our platfo **Market Segment:** 47% Small-Business, 33% Mid-Market ![Neelakanta P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Neelakanta P.") NP Cybeats is one of its kind tool which discovers varies possible risks and also mitage the effect by reducing the damage on the systems. Hence...[Read review](https://www.g2.com/products/cybeats/reviews/cybeats-review-7105257) ![NARENDRA PAL SINGH R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "NARENDRA PAL SINGH R.") NR Endpoint management and free cloud best solution is best part[Read review](https://www.g2.com/products/cybeats/reviews/cybeats-review-7112972) Year Founded 2017 HQ Location Toronto, Ontario Company Website https://www.cybeats.com/ Twitter @cybeatstech LinkedIn® Page https://www.linkedin.com/company/cybeats/ ### [Sonatype Nexus Repository](https://www.g2.com/products/sonatype-nexus-repository/reviews) [By Sonatype](https://www.g2.com/sellers/sonatype) [ (23)4.5 out of 5 ](https://www.g2.com/products/sonatype-nexus-repository/reviews#reviews "Read Sonatype Nexus Repository Reviews") Product Description World’s #1 Repository Manager with Free and Pro versions - Single source of truth for all of your components, binaries, and build artifacts. - Efficiently distribute parts and containers to develope **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 43% Enterprise, 39% Mid-Market ![Esteban B.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Esteban B.") EB This repository is the most straightforward to use storage for package distribution. It has clean management interface out of the box that covers...[Read review](https://www.g2.com/products/sonatype-nexus-repository/reviews/sonatype-nexus-repository-review-5229573) Year Founded 2008 HQ Location Fulton, US Company Website https://www.sonatype.com Twitter @sonatype LinkedIn® Page https://www.linkedin.com/company/210324/ ### [Socket](https://www.g2.com/products/socket-socket/reviews) [By Socket](https://www.g2.com/sellers/socket) [ (10)4.7 out of 5 ](https://www.g2.com/products/socket-socket/reviews#reviews "Read Socket Reviews") Product Description Socket is the leading developer-first security platform that protects modern applications from malicious and vulnerable open source dependencies. By combining real-time package monitoring with AI-powe **Market Segment:** 40% Mid-Market, 30% Enterprise ![Brewin V.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brewin V.") BV Socket has been a game-changer for our team. It stands out in the SCA space thanks to its developer-centric design and seamless integration into...[Read review](https://www.g2.com/products/socket-socket/reviews/socket-review-11426706) Year Founded 2020 HQ Location San Francisco, US Company Website https://socket.dev/ Twitter @SocketSecurity LinkedIn® Page https://www.linkedin.com/company/socketinc/ ### [Arnica](https://www.g2.com/products/arnica/reviews) [By Arnica](https://www.g2.com/sellers/arnica) [ (8)4.9 out of 5 ](https://www.g2.com/products/arnica/reviews#reviews "Read Arnica Reviews") Product Description Arnica is a comprehensive application security posture management (ASPM) platform that protects developers, source code, and products throughout the software development lifecycle. The platform provid **Market Segment:** 63% Enterprise, 25% Small-Business ![Joe W.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Joe W.") JW With Arnica, we are streamlining the review process through data driven analytics and automation to guard against the accumulation of excessive...[Read review](https://www.g2.com/products/arnica/reviews/arnica-review-6664928) ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI ou quickly understand the security posture of your codebase and can maintain continuous oversight while delegating day-to-day security...[Read review](https://www.g2.com/products/arnica/reviews/arnica-review-12915905) Year Founded 2021 HQ Location Alpharetta, Georgia Company Website https://www.arnica.io Twitter @arnicaio LinkedIn® Page https://www.linkedin.com/company/arnica-io/about ### [Jscrambler](https://www.g2.com/products/jscrambler/reviews) [By Jscrambler](https://www.g2.com/sellers/jscrambler) [ (31)4.4 out of 5 ](https://www.g2.com/products/jscrambler/reviews#reviews "Read Jscrambler Reviews") Product Description Jscrambler is the leader in Client-Side Security for the modern, composable web. As organizations increasingly build digital experiences through third-party software supply chains and AI-powered ag **Market Segment:** 35% Mid-Market, 29% Small-Business ![Verified User in Computer & Network Security](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer & Network Security") AC - Good quality of obfuscation. - Very good support. Always keen to help and respond to questions rapidly.[Read review](https://www.g2.com/products/jscrambler/reviews/jscrambler-review-12270285) OT I like that Jscrambler's functionality is easy to navigate and covers all our requirements for application operation. The setup didn't cause any...[Read review](https://www.g2.com/products/jscrambler/reviews/jscrambler-review-12273787) Year Founded 2014 HQ Location San Francisco, California Company Website https://jscrambler.com Twitter @Jscrambler LinkedIn® Page https://www.linkedin.com/company/1005462/ ### [Cloudsmith](https://www.g2.com/products/cloudsmith/reviews) [By Cloudsmith](https://www.g2.com/sellers/cloudsmith) [ (42)4.5 out of 5 ](https://www.g2.com/products/cloudsmith/reviews#reviews "Read Cloudsmith Reviews") Product Description Cloudsmith is the modern artifact management and software supply chain security platform. It gives engineering teams a unified control layer for every package, container, binary, and ML model moving t **Industries:** Computer Software, Information Technology and Services · **Market Segment:** 38% Small-Business, 36% Mid-Market ![Verified User in Computer Software](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Software") UC Cloudsmith is a great option for private npm repos. Works well to have a private npm repo on Cloudsmith associated with an npm scope. It's easy...[Read review](https://www.g2.com/products/cloudsmith/reviews/cloudsmith-review-8899252) ![Arnstein R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Arnstein R.") AR We use Cloudmith to host our open source builds for Vespa.ai. The service has proven reliable and is easy to use for our current purpose....[Read review](https://www.g2.com/products/cloudsmith/reviews/cloudsmith-review-9401006) Year Founded 2016 HQ Location Belfast, Northern Ireland Company Website https://cloudsmith.com Twitter @cloudsmith LinkedIn® Page https://www.linkedin.com/company/cloudsmith/ ### [DryRun Security](https://www.g2.com/products/dryrun-security/reviews) [By DryRun Security](https://www.g2.com/sellers/dryrun-security) [ (20)4.9 out of 5 ](https://www.g2.com/products/dryrun-security/reviews#reviews "Read DryRun Security Reviews") Product Description Security leaders face a paradox: ship faster and enable agentic development while staying secure and keeping developers productive. DryRun Security resolves this by securing every pull request and rep **Industries:** Computer & Network Security · **Market Segment:** 40% Small-Business, 30% Mid-Market ![John P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "John P.") JP DryRun Security runs and provides feedback where we do our work: GitHub. Feedback is provided quickly within the context of the Pull request. This...[Read review](https://www.g2.com/products/dryrun-security/reviews/dryrun-security-review-12374775) Year Founded 2023 HQ Location Austin, US Company Website https://dryrun.security LinkedIn® Page https://www.linkedin.com/company/dryrun-security/ ### [Xygeni](https://www.g2.com/products/xygeni/reviews) [By Xygeni Security](https://www.g2.com/sellers/xygeni-security) [ (5)4.6 out of 5 ](https://www.g2.com/products/xygeni/reviews#reviews "Read Xygeni Reviews") Product Description Secure your Software Development and Delivery! Xygeni Security specializes in Application Security Posture Management (ASPM), using deep contextual insights to effectively prioritize and manage secur **Market Segment:** 60% Small-Business, 40% Mid-Market ![Óscar G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Óscar G.") ÓG - Real-time malware detection: Xygeni’s early warning system has been a game-changer, identifying malicious open source components before they can...[Read review](https://www.g2.com/products/xygeni/reviews/xygeni-review-10880934) Year Founded 2021 HQ Location Madrid, ES Company Website https://xygeni.io Twitter @xygeni LinkedIn® Page https://www.linkedin.com/company/xygeni/ ### [ReversingLabs](https://www.g2.com/products/reversinglabs/reviews) [By ReversingLabs](https://www.g2.com/sellers/reversinglabs) [ (10)4.7 out of 5 ](https://www.g2.com/products/reversinglabs/reviews#reviews "Read ReversingLabs Reviews") Product Description ReversingLabs is the trusted name in file and software security. We provide the modern cybersecurity platform to verify and deliver safe binaries. Trusted by the Fortune 500 and leading cybersecurity **Market Segment:** 80% Small-Business, 10% Mid-Market TM RL has an industry leading, humongous repository of both known bad (malware) and known good files (it's critical to have both). At the time of this...[Read review](https://www.g2.com/products/reversinglabs/reviews/reversinglabs-review-11072685) MC I find the onboarding process with ReversingLabs to be magnificent, as everyone was super involved in addressing our specific needs. They...[Read review](https://www.g2.com/products/reversinglabs/reviews/reversinglabs-review-11960661) Year Founded 2009 HQ Location Cambridge, US Company Website https://www.reversinglabs.com/ Twitter @ReversingLabs LinkedIn® Page https://www.linkedin.com/company/reversinglabs/ [![G2 Advertising](/assets/my-g2-logo-41632af6f81a240a0a9886638f412b2ac9a29f4001534f8c83be89a58ef9d45d.svg "G2 Advertising")](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) Sponsored G2 Advertising Get 2x conversion than Google Ads with G2 Advertising! G2 Advertising places your product in premium positions on high-traffic pages and on targeted competitor pages to reach buyers at key comparison moments. [ Learn More ](https://sell.g2.com/case-studies/how-aisdr-uses-g2-ads-to-turn-g2-into-top-5-traffic-source) - ‹ Prev‹ Prev - 1 - [2](/categories/software-supply-chain-security-tools/free?open_modal_url=%2Fproducts%2Fsocket-socket%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fsoftware-supply-chain-security-tools%252Ffree%26source%3Dcategory&order=g2_score&page=2#product-list) - [Next ›Next ›](/categories/software-supply-chain-security-tools/free?open_modal_url=%2Fproducts%2Fsocket-socket%2Fwishlists%3Fhost_path%3D%252Fcategories%252Fsoftware-supply-chain-security-tools%252Ffree%26source%3Dcategory&order=g2_score&page=2#product-list)