Platform generating SBOMs and scanning containers for software supply chain security.
Anchore's SBOM and container security platform generates Software Bills of Materials and scans container images for vulnerabilities across the software supply chain.
The platform serves enterprise and government customers requiring software supply chain transparency and compliance.
Aqua Security
Aqua Software Supply Chain Security
aquasec.com
Manifest
SBOM & Supply Chain Transparency Platform
manifestcyber.com
| Attribute | SBOM & Container Security Platform | Aqua Software Supply Chain Security | SBOM & Supply Chain Transparency Platform | |
|---|---|---|---|---|
| Provider | | | | |
| Founded | 2016 | 2015 | 2022 | |
| Sells To | Enterprise | Enterprise | Enterprise | |
| Pricing Model | Recurring, Software | Usage-based by workloads or repos | Recurring, Software | |
| Ownership | Venture-backed | Private | Venture-backed |
Provider
Founded 2016
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
Provider
Founded 2015
Sells To Enterprise
Pricing Model Usage-based by workloads or repos
Ownership Private
Provider
Founded 2022
Sells To Enterprise
Pricing Model Recurring, Software
Ownership Venture-backed
DevOps platform for artifact management, SBOM generation, vulnerability scanning, and software supply-chain security.
Developer-security platform that finds and fixes vulnerabilities in open-source dependencies, containers, and infrastructure as code.
Software supply-chain and AI risk platform that generates SBOMs and exposes hidden vulnerabilities.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
Cloud-native application protection platform that prioritizes cloud risk.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
Security platform unifying prevention, detection, and response across containers, Kubernetes, and cloud services.
Platform that discovers and manages cyber assets and security coverage gaps.
SkyhighCloud-native application protection platform for security and compliance automation.
AI security agent that hunts intent-based vulnerabilities such as broken access control and business logic flaws.
Multi-disciplinary security reviews across application, blockchain, cryptography, and AI systems.
Contrast is a confidential container platform for Kubernetes that verifies what runs in production.
Maximize third-party script value while mitigating security and compliance risks through continuous inventory and blocking.
DevOps platform for artifact management, SBOM generation, vulnerability scanning, and software supply-chain security.
Developer-security platform that finds and fixes vulnerabilities in open-source dependencies, containers, and infrastructure as code.
Software supply-chain and AI risk platform that generates SBOMs and exposes hidden vulnerabilities.
SonarQube add-on extending SAST and SCA to detect CVEs, malicious packages, and license risks with SBOM export.
Cloud-native application protection platform that prioritizes cloud risk.
Managed open-core CNAPP mapping cloud and on-prem assets, attack paths, and misconfigurations.
Security platform unifying prevention, detection, and response across containers, Kubernetes, and cloud services.
Platform that discovers and manages cyber assets and security coverage gaps.
Cloud-native application protection platform for security and compliance automation.
SkyhighAI security agent that hunts intent-based vulnerabilities such as broken access control and business logic flaws.
Multi-disciplinary security reviews across application, blockchain, cryptography, and AI systems.
Contrast is a confidential container platform for Kubernetes that verifies what runs in production.
Maximize third-party script value while mitigating security and compliance risks through continuous inventory and blocking.
Code quality and security analysis platform for reviewing and remediating issues across more than 40 programming languages.