OWASP Dependency-Track — #5 Alternative to Snyk
Continuous enterprise SBOM portfolio vulnerability and license-compliance platform
OWASP Dependency-Track ingests CycloneDX SBOMs from every microservice build, continuously correlating components against NVD, GitHub Advisories, OSV, and EPSS exploitability scores.
License: Apache-2.0 · Pricing: Free & Open Source · Compare all Snyk alternatives · Official Website