← zurück

Kategorie

Vulnerability scanners

Check dependencies and container images against databases of known vulnerabilities.

Im Vergleich

Vulnerability scanners
ToolSterneLizenzBedingungenSelbst hostbarSpracheNeuestes ReleaseLetzter Push
Trivy38kApache-2.0Open SourceNeinGov0.75.02026-10-06
Grype13kApache-2.0Open SourceNeinGov0.120.02026-10-05
OSV-Scanner11kApache-2.0Open SourceNeinGov2.6.02026-10-05
Clair11kApache-2.0Open SourceNeinGov4.9.02026-09-30
Dependency-Check7.7kApache-2.0Open SourceNeinJavav13.0.02026-10-05

5 Tools

Trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

Sprache
Go
Lizenz
Apache-2.0
Sterne
38k
Neuestes Release
v0.75.0
Letzter Push
2026-10-06
Grype

A vulnerability scanner for container images and filesystems

Sprache
Go
Lizenz
Apache-2.0
Sterne
13k
Neuestes Release
v0.120.0
Letzter Push
2026-10-05
OSV-Scanner

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Sprache
Go
Lizenz
Apache-2.0
Sterne
11k
Neuestes Release
v2.6.0
Letzter Push
2026-10-05
Clair

Vulnerability Static Analysis for Containers

Sprache
Go
Lizenz
Apache-2.0
Sterne
11k
Neuestes Release
v4.9.0
Letzter Push
2026-09-30
Dependency-Check

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Sprache
Java
Lizenz
Apache-2.0
Sterne
7.7k
Neuestes Release
v13.0.0
Letzter Push
2026-10-05

Was diese Tools ersetzen