Dependency-Track

Issue Tracking & Agile Project Management

Get Verified & Update Profile Claimed profiles go to the top of search results. Get verified now, it takes just a couple minutes. Visit Report

Dependency-Track is an intelligent Component Analysis platform designed to identify and mitigate risks within the software supply chain through continuous Software Bill of Materials (SBOM) analysis.

It offers features such as vulnerability detection, policy compliance measurement, and real-time intelligence streams, enabling organizations to maintain a secure and transparent development environment.

Dependency-Track can be found in Issue Tracking & Agile Project Management categories.

The most similar products to Dependency-Track are:

Bergnaum, Hackett and Stanton Max Verified profile Promoted → SypraSAM Verified profile Promoted → EdgeBit → Manifest → FossID →

Screenshots

YouTube Videos

Details

Dependency-Track Main Features

• CISA VEX
  Produces and uses reports that meet CISA's recommendations for vulnerability exploitability.
• NIST VDR
  Creates reports that meet the standards set by NIST for vulnerability disclosures.
• Open Source
  Is a community-driven project that is freely available under the Apache 2. 0 license.
• Notifications
  Automatically sends alerts to communication tools like Slack and email.
• SBOM Analysis
  Checks components for security issues, operational risks, and license problems.
• SBOM Ingestion
  Allows users to upload SBOMs through different methods like REST, Jenkins, or a web interface.
• Impact Analysis
  Quickly identifies which projects are affected by known vulnerabilities.
• SBOM Production
  Creates a CycloneDX Software Bill of Materials during the software development process or from suppliers.
• Enterprise Ready
  Supports secure login methods like Single Sign-On and Active Directory.
• Auditing Workflow
  Keeps track of findings and policy violations with comments and decisions in an audit trail.
• Policy Evaluation
  Assesses and ensures compliance with security and operational policies for projects.
• Continuous Insight
  Helps identify risks in all assets and applications, showing what is affected and where.
• Exploit Prediction
  Helps prioritize which vulnerabilities to fix first using a scoring system.
• API and Integration
  Offers a well-documented API for easy integration with other systems.
• Time Series Metrics
  Shows trends in risk and policy violations for all projects over time.
• Intelligence Streams
  Provides real-time analysis and security alerts that can be sent to other systems.
• Intelligent Response
  Sends alerts through webhooks or chat tools and shares findings with risk management systems.
• Continuous Monitoring
  Keeps checking the software portfolio for risks and compliance with policies.
• Continuous Integration
  Analyzes SBOMs quickly, making it suitable for modern software development pipelines.
• Bill of Materials (BOM)
  Handles the creation and analysis of CycloneDX Software Bill of Materials.
• Continuous Transparency
  Offers a complete inventory of components and can share SBOMs with others in the supply chain.
• Vulnerability Detection
  Finds known vulnerabilities in third-party components using several databases.
• Continuous SBOM Analysis
  This feature allows ongoing analysis of the Software Bill of Materials to find risks.
• Vulnerability Aggregation
  Integrates with various risk platforms to provide a unified view of vulnerabilities.
• Outdated Version Detection
  Finds components that are not the latest version, which can affect project health.
• Measure and Enforce Policy Compliance
  Checks that security and operational policies are followed across teams and partners.
• Accurate and Complete Full-Stack Inventory
  Tracks all types of software and hardware used in projects for better traceability.
• Identify and Remediate Vulnerable Components
  Finds vulnerable components using various sources of vulnerability information.

Dependency-Track Benefits

• CISA VEX
  It follows guidelines to help you manage software vulnerabilities.
• NIST VDR
  It creates reports that meet strict security standards.
• Open Source
  It is free to use and has a large community for support.
• Notifications
  It sends alerts to your team through various platforms.
• SBOM Analysis
  It looks for risks in your software parts, helping you fix them quickly.
• SBOM Ingestion
  You can easily add your software component lists from different sources.
• Impact Analysis
  It helps you quickly respond to problems in affected projects.
• SBOM Production
  It creates a list of all software components used, making it easier to track them.
• Enterprise Ready
  It supports secure login methods for larger organizations.
• Auditing Workflow
  It keeps a record of findings and decisions for future reference.
• Policy Evaluation
  It checks if your projects meet security and operational rules.
• Continuous Insight
  It helps you see where risks are in all your software, making it easier to manage.
• Exploit Prediction
  It helps you decide which problems to fix first based on their risk.
• API and Integration
  It easily connects with other systems for better functionality.
• Time Series Metrics
  It shows trends in risks and policy issues over time.
• Full-Stack Inventory
  It tracks all types of software and services you use.
• Intelligence Streams
  It gives you real-time updates on security issues, so you can act fast.
• Intelligent Response
  It sends alerts about problems to your team, so they can respond quickly.
• Continuous Monitoring
  It keeps checking your software for risks and makes sure it follows rules.
• Bill of Materials (BOM)
  It helps you create and analyze a standard list of software components.
• Continuous Transparency
  You can share your software component lists with others in your supply chain.
• Vulnerability Detection
  It finds known problems in third-party software parts.
• Continuous SBOM Analysis
  It constantly checks your software parts for security and license issues.
• Reduce Supply Chain Risk
  It helps keep your software safe by finding problems in the supply chain.
• Vulnerability Aggregation
  It combines risk information from different sources for a clearer view.
• Outdated Version Detection
  It finds old software parts that could cause issues.
• Measure and enforce policy compliance
  It checks if your software follows security and license rules.
• Accurate and complete full-stack inventory
  It tracks all parts of your software, giving you a complete view of what you use.
• Identify and remediate vulnerable components
  It finds weak parts in your software and helps you fix them.

Who should use Dependency-Track?

• Suppliers
  Suppliers can share their software information to help others understand risks.
• Developers
  Developers can find and fix security problems in their code quickly.
• Security Teams
  Security teams can monitor software for vulnerabilities and ensure safety.
• Project Managers
  Project managers can see risks in projects and make better decisions.
• IT Administrators
  IT administrators can track all software components used in their systems.
• Compliance Officers
  Compliance officers can check if projects follow rules and policies easily.

Verified Badge

<a href="https://saasbrowser.com/en/saas/9161/dependency-track" target="_blank" rel="noopener"><img src="https://files.saasbrowser.com/i78y4o1c6dcxw3y4w30goscvz9tp" alt="Dependency-Track - SaaS Browser Verified Badge" width="200" height="133" /></a>

Copy Badge

<a href="https://saasbrowser.com/en/saas/9161/dependency-track" target="_blank" rel="noopener"><img src="https://files.saasbrowser.com/0vuccguj9hrsympbq34x95dxkz7v" alt="Dependency-Track - SaaS Browser Verified Badge" width="200" height="133" /></a>

Copy Badge

Dependency-Track Alternatives

Bergnaum, Hackett and Stanton Max

Verified profile

Promoted

This unified platform offers comprehensive Software Asset Management, Cloud F...

SypraSAM

Verified profile

Promoted

This unified platform offers comprehensive Software Asset Management, Cloud F...

EdgeBit

This comprehensive platform streamlines dependency management by continuously...

Manifest

This platform enhances software supply chain security by providing comprehens...

FossID

A comprehensive solution for analyzing software components, this tool identif...

Anchore

This platform is designed to enhance the security and compliance of software ...

Cybeats

A comprehensive platform enhances software supply chain transparency and secu...

Technologies Used

View All Technologies