Dev tools · alternatives · 2026

24 alternatives to SOOS
Developer security, license, compliance and testing platform
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. SOOS launched in 2021; newer entries below may have overtaken it.
- 1AV
Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Trusted by 4,000+ organizations.
2014 · tinfoilsecurity.com · its alternatives →
- 2

Open Source Feature Flags, Experimentation, and Product Analytics - growthbook/growthbook
2021 · github.com · its alternatives →
- 3PV
Hey HN, My name is Jack Naglieri. I’m the founder of Panther Labs - an SF-based cybersecurity startup. Prior to Panther, I was an engineering manager at Airbnb. Before that a security engineer/analyst/forensic analyst. Today, I’m excited to announce Panther v1.0, an open source, cloud-native SIEM: http://github.com/panther-labs/panther Teams can use Panther as an alternative to traditional SIEMs like Splunk. Panther is the culmination of our team’s experience building security tools at scale, including StreamAlert at Airbnb and critical internal monitoring…
2020 · its alternatives →
- 4

SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.
2016 · dependencyci.com · its alternatives →
- 5

A curated list of free OSS developer-first security tools
2022 · its alternatives →
- 6BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023 · its alternatives →
- 7

FOSSA secures the software supply chain with automated SBOM generation, software composition analysis, license compliance, and vulnerability management.
2017 · fossa.io · its alternatives →
- 8

Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 9

The AI-powered AppSec platform that identifies vulnerabilities with comprehensive penetration tests and provides actionable remediation insights.
2024 · beaglesecurity.com · its alternatives →
- 10
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 11

Compliance intelligence for app developers
2022 · checks.google.com · its alternatives →
- 12

Open safety reasoning models with custom safety policies
Oct 2025 · openai.com · its alternatives →
- 13

Automate app security with OSS vulnerability management
2020 · fossa.com · its alternatives →
- 14

Black Duck delivers True Scale Application Security — SAST, SCA, DAST, and AI-powered AppSec — to help security and development teams detect vulnerabilities, manage open source license risk, and secure the software supply chain. Trusted by 4,000+ organizations.
2011 · tinfoilsecurity.com · its alternatives →
- 15
Havoc Shield▲113All-in-One Cybersecurity Platform: 12 Tools in 1 Dashboard
2021 · info.havocshield.com · its alternatives →
- 16

- 17PR
See metrics from all of your apps, tools & services in one place with Datadog’s cloud monitoring as a service solution. Try it for free.
2012 · datadoghq.com · its alternatives →
- 18

Democratising Cybersecurity
2025 · thefirewall.org · its alternatives →
- 19

k6 is an open-source tool and cloud service that makes load testing easy for developers and QA engineers.
2017 · k6.io · its alternatives →
- 20

- 21

hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 22

Open Source Feature Flags, Experimentation, and Product Analytics - growthbook/growthbook
2021 · github.com · its alternatives →
- 23

An awesome list of OSS developer-first security tools - boxyhq/awesome-oss-devsec
2022 · github.com · its alternatives →
- 24

Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com · its alternatives →
Also compare
- Automatic VPN Generator – Protect Yourself at Sochi and Starbucks alternatives
- Open-source A/B testing framework alternatives
- Panther v1.0 – Open Source, Cloud-Native SIEM alternatives
- Dependency CI – Continuous testing for your dependencies alternatives
- Awesome OSS Developer Security Tools alternatives
- Bearer – Open-source code security scanning solution (SAST) alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →