← Catalog
Tag
sbom
Tools in this catalog tagged sbom. Honest Catch, not a roundup.
2 tools · the Catch, not a ranking
- TrivyApache-2.0 all-in-one vuln/IaC/secret/SBOM scanner; no paid tier
CLI/CI scanner — not Aqua Platform management UI/RBAC/policy SaaS. Vs Grype/Snyk: Aqua OSS default with broad target surface; Aqua Inc monetizes a separate commercial platform. You still triage and patch.
- GrypeApache-2.0 SBOM-first vulnerability scanner from Anchore; free CLI
Vuln scanner — not Trivy's IaC/secrets swiss-army, not Cosign signing, not Anchore Enterprise governance UI. You still triage CVEs. Anchore monetizes Enterprise separately.