Dev tools · alternatives · 2026
24 alternatives to Releasing Vulnerabilities of Open Source Software
Thrilled to announce that very soon The List Of Vulnerabilities collected from multiple platforms including ( npm, Maven, Go, NuGet, PyPI, RubyGems, crates.io, Packagist, Linux, OSS-Fuzz ) will be live at https://vulert.com/vuln-list. In short we are making sure that no vulnerability is left unreported and your software/service is always protected from unexpected attacks. Who doesn’t know Vulert Yet: Vulert, without any integration, notifies you if a Security Issue is found in any of the open-source software you are relying upon. HOW DOES VULERT PROTECT YOU ? PRIVACY: You…
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Releasing Vulnerabilities of Open Source Software launched in 2022; newer entries below may have overtaken it.
- 1
Vulert▲76Instant alerts on vulnerable dependencies. No installations
2023 · vulert.com · its alternatives →
- 2
Vulert▲10Open source monitoring: zero trust, no code access required
2024 · vulert.com · its alternatives →
- 3
An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 4
- 5
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 6
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 7
- 8
Snyk for GitHub▲143Fix vulnerabilities in Node & npm dependencies with a click.
2016 · snyk.io · its alternatives →
- 9
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 10NF
2014 · vuln.pub · its alternatives →
- 11
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 12SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 13
disclose.io▲11Driving safety & standardization in vulnerability disclosure
2018 · disclose.io · its alternatives →
- 14
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com · its alternatives →
- 157G
Happy to share the last week growth of https://vulert.com https://twitter.com/DevNackOfficial/status/1490993623026270214 Vulert notifies you if a security issue is found in any of the open-source software you use. Feedback or critics are welcome. Feel free to ask anything: info(@) vulert.com
2022 · its alternatives →
- 16
GitHub's security alerts for vulnerable dependencies
2017 · github.blog · its alternatives →
- 17
Downloads Information from NIST (CVSS), first.org (EPSS), and CISA (Exploited Vulnerabilities) and combines them into one list. Reports from vulnerability scanners like OpenVAS can be enriched with this information to prioritize remediation. The repository also contains a PowerBI template to show ho
2023 · github.com · its alternatives →
- 18CL
Hey people! I have been compiling a database of opensource alternatives and I'm super proud of it so far. It serves as a searchable directory for high-quality opensource. After tons of hours I've managed to compile a database of 1000+ opensource software. I've seen other sites which have the same premise and all the GitHub Awesome Lists, but they lack in showing if the repo is active, abandoned, experimental, buggy/unstable, has a restrictive license or corporate influence like this does. Thanks for your time, if you have any recommendations for features/additions I'd love to hear.
Feb 2026 · opensrc.me · its alternatives →
- 19
Map your stack. See every vulnerability. Fix what matters.
Mar 2026 · vulnxplorer.com · its alternatives →
- 20
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 21
- 22
- 23
Track your products. We’ll watch the vulnerabilities.
Dec 2025 · vulntracker.io · its alternatives →
- 24
PwnScan▲8For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…
2025 · pwnscan.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →