Best OWASP Amass Alternatives in 2026
Updated
20 platforms from software composition analysis software ranked against OWASP Amass on the same published basis.
- 1OWASP Amass vs Snyk Open Source
- 2OWASP Amass vs Sonatype Nexus Repository
- 3OWASP Amass vs ComplyVigilance SCA
- 4OWASP Amass vs Endor Labs
- 5OWASP Amass vs FOSSA
- 6OWASP Amass vs OWASP dep-scan
- 7OWASP Amass vs Semgrep Supply Chain
- 8OWASP Amass vs Socket
- 9OWASP Amass vs Xygeni
- 10OWASP Amass vs OWASP Dependency-Track
- 11OWASP Amass vs ReversingLabs Cloud Sandbox
- 12OWASP Amass vs Veracode DAST
- 13OWASP Amass vs Checkmarx API Security
- 14OWASP Amass vs Mend SCA
- 15OWASP Amass vs ZeroPath
- 16OWASP Amass vs Revenera SBOM Insights
- 17OWASP Amass vs Trivy
- 18OWASP Amass vs Accessibility Test Framework for Android
- 19OWASP Amass vs Docker Desktop
- 20OWASP Amass vs Grype
OWASP Amass alternatives compared
| # | Platform | Score | Free plan | From | Runs on |
|---|---|---|---|---|---|
| 1 | Snyk Open Source | 7.4 | Free plan | $25/mo | API, Linux, Mac, Web, Windows |
| 2 | Sonatype Nexus Repository | 7.4 | Free plan | $162.50/mo | API, Linux, Mac, self-hosted, Web, Windows |
| 3 | ComplyVigilance SCA | 7.3 | Free plan | €10/mo | API, self-hosted, Web |
| 4 | Endor Labs | 7.3 | Free plan | Free | API, Linux, Mac, Web, Windows |
| 5 | FOSSA | 7.3 | Free plan | $168392.50/mo | API, Linux, self-hosted, Web |
| 6 | OWASP dep-scan | 7.3 | Free plan | Free | API, Linux, Mac, self-hosted, Windows |
| 7 | Semgrep Supply Chain | 7.3 | Free plan | $30/mo | API, Linux, Mac, self-hosted, Web |
| 8 | Socket | 7.3 | Free plan | $25/mo | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 9 | Xygeni | 7.3 | Free plan | Free | API, Browser, Linux, Mac, self-hosted, Web, Windows |
| 10 | OWASP Dependency-Track | 7.2 | Free plan | Free | API, self-hosted, Web |
| 11 | ReversingLabs Cloud Sandbox | 6.9 | No | — | Android, API, Linux, Mac, Web, Windows |
| 12 | Veracode DAST | 6.9 | No | — | API, Linux, Mac, Web, Windows |
| 13 | Checkmarx API Security | 6.8 | No | — | API, self-hosted, Web |
| 14 | Mend SCA | 6.7 | No | $83.33/mo | API, Linux, Mac, Web, Windows |
| 15 | ZeroPath | 6.7 | No | $1,000/mo | API, Linux, Mac, self-hosted, Web, Windows |
| 16 | Revenera SBOM Insights | 6.6 | No | — | API, Linux, Web, Windows |
| 17 | Trivy | 6.0 | Free plan | Free | Linux, Mac, self-hosted, Windows |
| 18 | Accessibility Test Framework for Android | 5.9 | Free plan | Free | Android, Linux, Mac, Windows |
| 19 | Docker Desktop | 5.9 | Free plan | $9/mo | Linux, Mac, Web, Windows |
| 20 | Grype | 5.9 | Free plan | Free | Linux, Mac, self-hosted, Windows |
The sponsored alternative slot on this page is labelled Sponsored.
Questions about OWASP Amass alternatives
What is the best alternative to OWASP Amass?
Snyk Open Source, number 1 in software composition analysis software with a score of 7.4 out of 10. The others here: Sonatype Nexus Repository, ComplyVigilance SCA, Endor Labs and 16 more.
What is the best free alternative to OWASP Amass?
Snyk Open Source is the best-ranked alternative with a free plan. 14 of the 20 alternatives here publish a free plan on their own pricing pages.
How are these alternatives ranked?
Ranked on what each maker publishes, open and connectable first: a public API, open-source code, the depth of its documentation and a free tier to try it on. Model lists are sorted by the figure in their title, exactly as each provider publishes it.