Dev tools · alternatives · 2026
24 alternatives to Open Source Security Management by FOSSA
Automate app security with OSS vulnerability management
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Open Source Security Management by FOSSA launched in 2020; newer entries below may have overtaken it.
- 1
FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.
2017 · fossa.io · its alternatives →
- 2
- 3
Fossa▲5Realtime license management for open source dependencies
2019 · fossa.com · its alternatives →
- 4
Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems. - fossas/fossa-cli
2018 · github.com · its alternatives →
- 5
Phase▲383Open source platform for teams and AI agents to securely access, manage and deploy application secrets — from development to production.
2024 · phase.dev · its alternatives →
- 6
aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.
2015 · appcanary.com · its alternatives →
- 7
A curated list of free OSS developer-first security tools
2022 · its alternatives →
- 8BE
2016 · bitkeeper.org · its alternatives →
- 9
Sandworm▲293Keep your JavaScript code secure and compliant with Sandworm
2023 · sandworm.dev · its alternatives →
- 10PR
2016 · patchworksecurity.com · its alternatives →
- 11
Vulnerability management, vulnerability discovery, devsecops
2023 · whitespots.io · its alternatives →
- 12
First Globally Vulnerability Management Platform on earth
2019 · its alternatives →
- 13
Patara APP▲97Password management with the power of blockchain technology
2024 · patara.app · its alternatives →
- 14
Sym▲123Secure your production infrastructure without slowing down
2023 · symops.com · its alternatives →
- 15
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 16
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 17
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 18
Exploit Alarm▲151Vulnerability intelligence for real-time threat analysis
2024 · exploitalarm.com · its alternatives →
- 19
An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 20EM
Hello Hacker News! We're Joseph, Kieran and David from elestio (https://elest.io/). We've built a platform that offers open-source software as a managed service - we take care of the OS and app updates, security, SSL, networking, backups, the whole deal. In 2009, we started deploying open-source software for websites and web apps we built, many for SMB and enterprise customers. Our process was basically: spin up VM's from a hosting provider, install the software we needed, then update it manually / when it was needed / critical, etc. Once we hit > 100…
2022 · its alternatives →
- 21
🚀 Fast and simple Node.js version manager, built in Rust - Schniz/fnm
2019 · github.com · its alternatives →
- 22
A Rust crate for containing memory leaks and fragmentation - brannondorsey/mem-isolate
2025 · github.com · its alternatives →
- 23
2018 · youtube.com · its alternatives →
- 24
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →