nowfound

Dev tools · alternatives · 2026

24 alternatives to SBOM Archi

Continuous SBOM Risk Management for Software Supply Chains

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.

    2017 · fossa.io · its alternatives →

  2. 2

    A single pane of glass for software supply chain risk

    2023 · vulnerabilities.io · its alternatives →

  3. 3

    Build Better SBOM

    2023 · demo.interlynk.io · its alternatives →

  4. 4

    A better way to control your software supply chain

    2021 · bytesafe.dev · its alternatives →

  5. 5
    Arnica▲97

    Behavior based software supply chain security

    2022 · arnica.io · its alternatives →

  6. 6

    Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…

    2022 · socket.dev · its alternatives →

  7. 7

    Automate app security with OSS vulnerability management

    2020 · fossa.com · its alternatives →

  8. 8

    Procurement & materials management software

    2021 · currentscm.com · its alternatives →

  9. 9

    Uncover all tools in your stack and streamline your workflow

    2024 · usebeams.com · its alternatives →

  10. 10

    SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

    2016 · dependencyci.com · its alternatives →

  11. 11

    Track vulnerabilities across all your software projects

    Feb 2026 · sbomhub.app · its alternatives →

  12. 12

    Secure your JavaScript supply chain – block malware packages

    2022 · socket.dev · its alternatives →

  13. 13

    Open-source DORA metrics for software engineering teams

    2024 · github.com · its alternatives →

  14. 14
    SSOReady▲144

    Open source developer tools for enterprise single sign-on

    2024 · github.com · its alternatives →

  15. 15

    Design research library for SaaS makers

    2023 · saasframe.io · its alternatives →

  16. 16
    Sym▲123

    Secure your production infrastructure without slowing down

    2023 · symops.com · its alternatives →

  17. 17
    SOOS▲68

    Developer security, license, compliance and testing platform

    2021 · soos.io · its alternatives →

  18. 18

    Hey HN! We just launched open sign up on Buildstash. It's a platform for managing and sharing software binaries. I'd worked across game dev, mobile apps, and agencies - and found every team had no real system for managing their built binaries. Often just dumped in a shared folder (if someone remembered!). No system for versioning, keeping track of who'd signed off what when, or what exact build had gone to a client, etc. Existing tools out there for managing build artifacts are really focused on package repository management. But miss all the other types of software not being deployed that…

    2025 · buildstash.com · its alternatives →

  19. 19
    Strada▲168

    Developer-first, enterprise integration platform

    2023 · getstrada.com · its alternatives →

  20. 20

    Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…

    2023 · github.com · its alternatives →

  21. 21

    Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

    2025 · github.com · its alternatives →

  22. 22

    Protect your business, mitigate risk, stay competitive

    2023 · bitedata.io · its alternatives →

  23. 23
    Deptic▲3

    Scan any GitHub repo.Generate SBOMs & detect CVEs instantly.

    Jun 2026 · deptic.netlify.app · its alternatives →

  24. 24

    Software Engineering Orchestration Platform (SEOP)

    2025 · scrums.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →