Dev tools · alternatives · 2026
24 alternatives to SBOMHub
Track vulnerabilities across all your software projects
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.
2017 · fossa.io · its alternatives →
- 2
- 3
A single pane of glass for software supply chain risk
2023 · vulnerabilities.io · its alternatives →
- 4
- 5
TraceRoot.AI▲342Fix bugs faster with open source, AI native observability
2025 · traceroot.ai · its alternatives →
- 6
An open source security scanner for Visual Studio Code
2020 · snyk.io · its alternatives →
- 7
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 8SF
We strongly believe working on open source software should be a viable source of income for many more developers. Unfortunately, the following barriers limit the extent of open source funding: - Only a small fraction of open source projects are funded, and most money goes to a few notable projects. - Each project has to market is self to get significant funding. - Large corporate donations provide the bulk of the funding, making it unreliable and unattainable for many. - Finding and supporting each of your dependencies is a cumbersome task. Which ones, how much, and on which platforms? So we…
2022 · stackaid.us · its alternatives →
- 9
SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 10
- 11EY
2019 · secalerts.co · its alternatives →
- 12
- 13
A beautiful web dashboard for Linux. Contribute to tariqbuilds/linux-dash development by creating an account on GitHub.
2014 · github.com · its alternatives →
- 14SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 15PR
2016 · patchworksecurity.com · its alternatives →
- 16
- 17
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 18
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 19
Open-source reporting platform to build and share live dashboards from APIs, SQL and NoSQL databases, with powerful AI assistant, scheduling, and embeddable charts 📈📊 - chartbrew/chartbrew
2021 · github.com · its alternatives →
- 20
Automate app security with OSS vulnerability management
2020 · fossa.com · its alternatives →
- 21
SecureVibe▲87Free IDE extension to ship secure vibe coded projects
2025 · securevibe.org · its alternatives →
- 22
SOOS▲68Developer security, license, compliance and testing platform
2021 · soos.io · its alternatives →
- 23
World's Largest Exploit Database
2023 · exploit.observer · its alternatives →
- 24
Hey Xinwei and Zecheng here, we are the authors of TraceRoot (https://github.com/traceroot-ai/traceroot). TraceRoot (https://traceroot.ai) is an open-source debugging platform that helps engineers fix production issues faster by combining structured traces, logs, source code contexts and discussions in Github PRs, issues and Slack channels, etc. with AI Agents. At the heart are our lightweight Python (https://github.com/traceroot-ai/traceroot-sdk) and TypeScript (https://github.com/traceroot-ai/traceroot-sdk-ts) SDKs -…
2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →