Finite State Platform vs OWASP Dependency-Track
OWASP Dependency-Track
6.4 #21 in Software Composition Analysis Software
About OWASP Dependency-Track| Finite State Platform | OWASP Dependency-Track | |
|---|---|---|
| Free plan | No | Yes |
| Free trial | No | No |
| Paid from | — | Free |
| Open source | No | No |
| Platforms | Web | api, self-hosted, Web |
| Supported ecosystems | C/C++, Rust, Java, Python, JavaScript, Go, Assembly, Swift, Kotlin, C#, PHP, Ruby, Perl, Shell, Scala, Dart, TypeScript, Objective-C; Linux, VxWorks, Windows, macOS, Android, iOS, FreeRTOS, QNX, ThreadX, Zephyr, INTEGRITY, Embedded Linux, Windows IoT, RTEMS; ELF, PE, Mach-O, APK, JAR, WASM, IPA, MSI, DMG, DEB | Cargo, Composer, Gems, Hex, Maven, NPM, NuGet, PyPI |
| SBOM generation | Yes | Yes |
| Reachability analysis | Yes | — |
| Pull request scanning | Yes | — |
| Free plan | — | Yes |
| Deployment options | — | self_hosted |
Both are listed in Best Software Composition Analysis Software. On Samsung Mobile US Press, Finite State Platform scores higher on our published basis.