Best OWASP Amass Alternatives in 2026
Updated
20 platforms from software composition analysis software ranked against OWASP Amass on the same published basis.
- 1OWASP Amass vs Sonatype Nexus Repository
- 2OWASP Amass vs Xygeni
- 3OWASP Amass vs Safety CLI
- 4OWASP Amass vs FOSSA
- 5OWASP Amass vs Docker Desktop
- 6OWASP Amass vs Snyk Open Source
- 7OWASP Amass vs Socket
- 8OWASP Amass vs OpenSCA
- 9OWASP Amass vs Semgrep Supply Chain
- 10OWASP Amass vs Veracode DAST
- 11OWASP Amass vs Endor Labs
- 12OWASP Amass vs Grype
- 13OWASP Amass vs Trivy
- 14OWASP Amass vs Accessibility Test Framework for Android
- 15OWASP Amass vs ComplyVigilance SCA
- 17OWASP Amass vs bundler-audit
- 18OWASP Amass vs govulncheck
- 19OWASP Amass vs OSV-Scanner
- 20OWASP Amass vs OWASP dep-scan
- 21OWASP Amass vs OWASP Dependency-Track
OWASP Amass alternatives compared
| # | Platform | Score | Free plan | From | Runs on |
|---|---|---|---|---|---|
| 1 | Sonatype Nexus Repository | 8.0 | Free plan | $162.50/mo | API, Linux, Mac, self-hosted, Web, Windows |
| 2 | Xygeni | 7.9 | Free plan | Free | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 3 | Safety CLI | 7.8 | Free plan | $25/mo | Linux, Mac, self-hosted, Windows |
| 4 | FOSSA | 7.7 | Free plan | $168392.50/mo | API, Linux, self-hosted, Web |
| 5 | Docker Desktop | 7.4 | Free plan | $9/mo | Linux, Mac, Web, Windows |
| 6 | Snyk Open Source | 7.4 | Free plan | $25/mo | API, Linux, Mac, Web, Windows |
| 7 | Socket | 7.3 | Free plan | $25/mo | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 8 | OpenSCA | 7.2 | Free plan | Free | Browser, Linux, Mac, self-hosted, Web, Windows |
| 9 | Semgrep Supply Chain | 7.2 | Free plan | $30/mo | API, Linux, Mac, self-hosted, Web |
| 10 | Veracode DAST | 7.2 | No | — | API, Linux, Mac, Web, Windows |
| 11 | Endor Labs | 7.1 | Free plan | Free | API, Linux, Mac, Web, Windows |
| 12 | Grype | 7.1 | Free plan | Free | Linux, Mac, self-hosted, Windows |
| 13 | Trivy | 7.1 | Free plan | Free | Linux, Mac, self-hosted, Windows |
| 14 | Accessibility Test Framework for Android | 7.0 | Free plan | Free | Android, Linux, Mac, Windows |
| 15 | ComplyVigilance SCA | 7.0 | Free plan | €10/mo | API, self-hosted, Web |
| 17 | bundler-audit | 6.9 | Free plan | Free | Linux, Mac |
| 18 | govulncheck | 6.9 | Free plan | Free | Linux |
| 19 | OSV-Scanner | 6.9 | Free plan | Free | Linux, Mac, self-hosted, Windows |
| 20 | OWASP dep-scan | 6.9 | Free plan | Free | API, Linux, Mac, self-hosted, Windows |
| 21 | OWASP Dependency-Track | 6.9 | Free plan | Free | API, self-hosted, Web |
Make your platform an alternative to OWASP Amass
See the priceThe sponsored alternative slot on this page is labelled Sponsored.
Questions about OWASP Amass alternatives
What is the best alternative to OWASP Amass?
Sonatype Nexus Repository, number 1 in software composition analysis software with a score of 8.0 out of 10. The others here: Xygeni, Safety CLI, FOSSA and 16 more.
What is the best free alternative to OWASP Amass?
Sonatype Nexus Repository is the best-ranked alternative with a free plan. 19 of the 20 alternatives here publish a free plan on their own pricing pages.
How are these alternatives ranked?
Ranked on how quickly a newcomer can get going: documentation depth, a free tier or trial, and the platforms it runs on.